level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.349935ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="183.514µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.57442ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="11.851µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=99.041089ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.911µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="23.89µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="66.761µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="86.572µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="105.712µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="523.11µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.91µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.097824ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.07924ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="85.782µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="94.243µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="239.545µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="112.072µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="96.992µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.720699ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="195.313µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="24.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="4.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.248.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.555711ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="39.711µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.235288ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.108667ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="13.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.82µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.481µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="27.59µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="16.85µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="52.931µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="490.578µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="14.18µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="405.137µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration=1.024548ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.65929ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.78µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="26.24µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.248 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.248 ipAddr.ipv6="" k8sNodeIP=199.204.45.248 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.248" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.146" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.248" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.248} {CiliumInternalIP 10.0.0.146}] 10.0.0.0/24 [] [] 10.0.0.168 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:35887" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.470990064s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="17.2µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.49µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="34.992µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.46µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.515813818s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=329.146484ms file-path=/var/run/cilium/state/templates/831cd8437f6a9674047e9744568747544463550de400f455fc34c15ec07bf94b/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1999 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 7aa12229-9840-4306-beb8-3e463d4a34a1 default }" containerID=1619769fb449e3451a4c6c6348d05056cdf18fee860251852fa5224667ded4bd datapathConfiguration="&{false false false false false }" interface=lxc64887478343b k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-85xtn labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.188 d94038d3-37d1-4ac7-b144-e53dc8f18f98 default }" containerID=d9f29fc47a304cecdaaca891562149ed60d856d5dacb60b0bc561eedb72b8d9e datapathConfiguration="&{false false false false false }" interface=lxcce246324a2df k8sPodName=kube-system/coredns-7c96b6546b-rtvjz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1619769fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 ipv4=10.0.0.115 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-85xtn subsys=endpoint level=info msg="New endpoint" containerID=d9f29fc47a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rtvjz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9f29fc47a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rtvjz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1619769fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f850f4d9-3fb5-4f80-ba2b-c5c28d75fc5e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f850f4d9-3fb5-4f80-ba2b-c5c28d75fc5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.115 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-85xtn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d9f29fc47a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rtvjz line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=1619769fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-85xtn line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d9f29fc47a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=17207 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rtvjz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9f29fc47a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=17207 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rtvjz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=f850f4d9-3fb5-4f80-ba2b-c5c28d75fc5e;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=f850f4d9-3fb5-4f80-ba2b-c5c28d75fc5e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1619769fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identity=8156 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f850f4d9-3fb5-4f80-ba2b-c5c28d75fc5e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f850f4d9-3fb5-4f80-ba2b-c5c28d75fc5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.115 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-85xtn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1619769fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identity=8156 ipv4=10.0.0.115 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-85xtn subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 ipv4=10.0.0.168 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identityLabels="reserved:health" ipv4=10.0.0.168 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identity=4 identityLabels="reserved:health" ipv4=10.0.0.168 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.056878966s file-path=/var/run/cilium/state/templates/f2c9bb1fa8003f72488dc144a69580f1d8231870ad279cf27c751e6a79dbb9ac/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=1619769fb4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1106 identity=8156 ipv4=10.0.0.115 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-85xtn subsys=endpoint level=info msg="Successful endpoint creation" containerID=1619769fb4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1106 identity=8156 ipv4=10.0.0.115 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-85xtn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d9f29fc47a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=410 identity=17207 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rtvjz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9f29fc47a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=410 identity=17207 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rtvjz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=616 identity=4 ipv4=10.0.0.168 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1619769fb4 endpointID=1106 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-85xtn subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=f850f4d9-3fb5-4f80-ba2b-c5c28d75fc5e k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=f850f4d9-3fb5-4f80-ba2b-c5c28d75fc5e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=1619769fb4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1106 identity=8156 ipv4=10.0.0.115 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-85xtn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 77eb855a-d44d-4b29-a6bf-f85e0d5f7344 default }" containerID=e5f541e9ce0ca0aaf52fccaa7995b76ddf82ed5505c4e8a48585b7dc7bb4e149 datapathConfiguration="&{false false false false false }" interface=lxcd4ee2b49f526 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dq9cf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5f541e9ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1988 ipv4=10.0.0.192 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dq9cf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5f541e9ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1988 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.192 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dq9cf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5f541e9ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1988 identity=6135 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.192 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dq9cf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5f541e9ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1988 identity=6135 ipv4=10.0.0.192 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dq9cf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e5f541e9ce datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1988 identity=6135 ipv4=10.0.0.192 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dq9cf subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5f541e9ce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1988 identity=6135 ipv4=10.0.0.192 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dq9cf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1999 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01999 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01999 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01999 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01999:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1999 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 0e825f7d-e20b-4ae3-98eb-1c4019617c32 default }" containerID=89a6b251a8fd59f1d1362b4645567266a2d31a68fc41f1f89a35ccb4cbbedb4c datapathConfiguration="&{false false false false false }" interface=lxc72a67cb50704 k8sPodName=kube-system/coredns-67659f764b-9vr5g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89a6b251a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-67659f764b-9vr5g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89a6b251a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-67659f764b-9vr5g subsys=endpoint level=info msg="Identity of endpoint changed" containerID=89a6b251a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=17207 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-67659f764b-9vr5g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89a6b251a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=17207 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-67659f764b-9vr5g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89a6b251a8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=62 identity=17207 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-67659f764b-9vr5g subsys=endpoint level=info msg="Successful endpoint creation" containerID=89a6b251a8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=62 identity=17207 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-67659f764b-9vr5g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.10 787f06c9-bd91-4611-873f-cfdaca3a3090 default }" containerID=72567ed69c085e3aa207ce78ff77bd7e06afb41d22991b7f74b958d705f2e658 datapathConfiguration="&{false false false false false }" interface=lxc534539419a06 k8sPodName=kube-system/coredns-67659f764b-qqc7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72567ed69c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 ipv4=10.0.0.10 ipv6= k8sPodName=kube-system/coredns-67659f764b-qqc7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72567ed69c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.10 ipv6= k8sPodName=kube-system/coredns-67659f764b-qqc7r subsys=endpoint level=info msg="Identity of endpoint changed" containerID=72567ed69c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identity=17207 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.10 ipv6= k8sPodName=kube-system/coredns-67659f764b-qqc7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72567ed69c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identity=17207 ipv4=10.0.0.10 ipv6= k8sPodName=kube-system/coredns-67659f764b-qqc7r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72567ed69c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3388 identity=17207 ipv4=10.0.0.10 ipv6= k8sPodName=kube-system/coredns-67659f764b-qqc7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=72567ed69c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3388 identity=17207 ipv4=10.0.0.10 ipv6= k8sPodName=kube-system/coredns-67659f764b-qqc7r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.101 a6c8acc3-6515-4f57-8820-d9e68eedbad8 default }" containerID=dff734113c5b4d8efd9f7a4ffcfa651294fd18dd257d1f6455d01f943ead41da datapathConfiguration="&{false false false false false }" interface=lxc78437882837f k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tg2lm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dff734113c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tg2lm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dff734113c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tg2lm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dff734113c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tg2lm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dff734113c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identity=57419 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tg2lm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dff734113c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identity=57419 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tg2lm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dff734113c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=758 identity=57419 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tg2lm subsys=endpoint level=info msg="Successful endpoint creation" containerID=dff734113c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=758 identity=57419 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tg2lm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d9f29fc47a endpointID=410 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-rtvjz subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=d9f29fc47a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=410 identity=17207 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rtvjz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 67d30f44-10eb-46d7-b4af-46b311da2646 default }" containerID=a3c5dfd181eab765ea25580e0da778ae81527430fb76b0c46ba5e0c7da83dd49 datapathConfiguration="&{false false false false false }" interface=lxc33a0c2364e1a k8sPodName=cert-manager/cert-manager-75969b45cf-ktkrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3c5dfd181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 ipv4=10.0.0.152 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ktkrl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 70bed299-a0ef-4474-9076-75af5c51e08a default }" containerID=c616efc0f01dac42cfd5db00abee7c9ca32e810cf88bd3fb1b0422ffb427ece4 datapathConfiguration="&{false false false false false }" interface=lxcdb9cb7a03fdf k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-b8h6p labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=a3c5dfd181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.152 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ktkrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=c616efc0f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-b8h6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c616efc0f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-b8h6p subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3c5dfd181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identity=13668 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.152 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ktkrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3c5dfd181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identity=13668 ipv4=10.0.0.152 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ktkrl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c616efc0f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-b8h6p line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c616efc0f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identity=15325 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-b8h6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c616efc0f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identity=15325 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-b8h6p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a3c5dfd181 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1760 identity=13668 ipv4=10.0.0.152 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ktkrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3c5dfd181 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1760 identity=13668 ipv4=10.0.0.152 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ktkrl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c616efc0f0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=445 identity=15325 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-b8h6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=c616efc0f0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=445 identity=15325 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-b8h6p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.205 5fb67cb7-18ca-4151-8bfb-9d0c40677398 default }" containerID=740112f860d7b021faf264c78ca71df36bea75efa737fd08e3eb49dddca85bec datapathConfiguration="&{false false false false false }" interface=lxc33bd00c0da00 k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-2l78s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=740112f860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2852 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-2l78s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=740112f860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2852 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-2l78s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=740112f860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2852 identity=3293 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-2l78s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=740112f860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2852 identity=3293 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-2l78s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=740112f860 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2852 identity=3293 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-2l78s subsys=endpoint level=info msg="Successful endpoint creation" containerID=740112f860 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2852 identity=3293 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-2l78s subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.225 57c48f5f-af42-4147-b258-51e9b5cf69cb default }" containerID=66deb4018147102713bf84af74a3181da08ed81cd766a14663bde3a2bc9b276c datapathConfiguration="&{false false false false false }" interface=lxc40455e3d7d85 k8sPodName=cert-manager/cert-manager-startupapicheck-mzcgb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66deb40181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mzcgb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66deb40181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=7407fd72-744a-460e-addb-02673b61502a,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=7407fd72-744a-460e-addb-02673b61502a,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mzcgb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=7407fd72-744a-460e-addb-02673b61502a;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=7407fd72-744a-460e-addb-02673b61502a;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66deb40181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=13742 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=7407fd72-744a-460e-addb-02673b61502a,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=7407fd72-744a-460e-addb-02673b61502a,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mzcgb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66deb40181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=13742 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mzcgb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66deb40181 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=829 identity=13742 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mzcgb subsys=endpoint level=info msg="Successful endpoint creation" containerID=66deb40181 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=829 identity=13742 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mzcgb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=66deb40181 endpointID=829 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-mzcgb subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=7407fd72-744a-460e-addb-02673b61502a k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=7407fd72-744a-460e-addb-02673b61502a k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=66deb40181 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=829 identity=13742 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mzcgb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 1fdcf155-70f1-4b40-bea1-ba57fc64f690 default }" containerID=687e8248017f95090337b4f8517147e2777d303d9ece0e0945ae2241f55abc28 datapathConfiguration="&{false false false false false }" interface=lxc4fbd1cd4069b k8sPodName=ingress-nginx/ingress-nginx-admission-create-nf8c2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=687e824801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nf8c2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=687e824801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1a71b233-054f-4a35-a318-b0367aef3662,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=1a71b233-054f-4a35-a318-b0367aef3662,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nf8c2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=687e824801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nf8c2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=1a71b233-054f-4a35-a318-b0367aef3662;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=1a71b233-054f-4a35-a318-b0367aef3662;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=687e824801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identity=39811 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1a71b233-054f-4a35-a318-b0367aef3662,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=1a71b233-054f-4a35-a318-b0367aef3662,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nf8c2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=687e824801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identity=39811 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nf8c2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=687e824801 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=861 identity=39811 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nf8c2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=687e824801 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=861 identity=39811 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nf8c2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=687e824801 endpointID=861 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-nf8c2 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=1a71b233-054f-4a35-a318-b0367aef3662 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=1a71b233-054f-4a35-a318-b0367aef3662 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=687e824801 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=861 identity=39811 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nf8c2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 4f51d569-00e4-4562-a0fd-bca4641c00ce default }" containerID=fb66736ca9e7de0e4a38fe7e1bcc65ec3cd631d6e34679d5fdf3a48c66aef953 datapathConfiguration="&{false false false false false }" interface=lxc24044c94a97f k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nxtrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb66736ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 ipv4=10.0.0.165 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nxtrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb66736ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.165 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nxtrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fb66736ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nxtrt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb66736ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identity=27394 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.165 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nxtrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb66736ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identity=27394 ipv4=10.0.0.165 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nxtrt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb66736ca9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1925 identity=27394 ipv4=10.0.0.165 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nxtrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb66736ca9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1925 identity=27394 ipv4=10.0.0.165 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nxtrt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 93cb4fd9-e5bf-4f37-b2b5-1183648dbb90 default }" containerID=c0433583781ac1e9df96d312a288f3fe470f6bccf9f44a892ec42c483a39ab49 datapathConfiguration="&{false false false false false }" interface=lxcaa1902db5cf2 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sqdmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c043358378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sqdmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c043358378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d7e229de-0f50-486f-92d5-b190290f2c2a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=d7e229de-0f50-486f-92d5-b190290f2c2a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sqdmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=d7e229de-0f50-486f-92d5-b190290f2c2a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=d7e229de-0f50-486f-92d5-b190290f2c2a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c043358378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 identity=26768 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d7e229de-0f50-486f-92d5-b190290f2c2a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=d7e229de-0f50-486f-92d5-b190290f2c2a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sqdmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c043358378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 identity=26768 ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sqdmf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c043358378 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2675 identity=26768 ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sqdmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=c043358378 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2675 identity=26768 ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sqdmf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c043358378 endpointID=2675 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-sqdmf subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=d7e229de-0f50-486f-92d5-b190290f2c2a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=d7e229de-0f50-486f-92d5-b190290f2c2a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=c043358378 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2675 identity=26768 ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sqdmf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 6ccfa20f-fcfa-4a44-a27d-2f5c5eda8638 default }" containerID=3af3feed590a1dba1ebc3d675f85c8c20c03c71bc3b35417d2aff51969a6f079 datapathConfiguration="&{false false false false false }" interface=lxcfc980ca3dc2c k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-xk4rs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3af3feed59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2955 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-xk4rs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3af3feed59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2955 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-xk4rs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3af3feed59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2955 identity=36255 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-xk4rs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3af3feed59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2955 identity=36255 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-xk4rs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3af3feed59 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2955 identity=36255 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-xk4rs subsys=endpoint level=info msg="Successful endpoint creation" containerID=3af3feed59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2955 identity=36255 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-xk4rs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.164 d58373fa-7e57-476c-9e89-4e54dbee29f3 default }" containerID=0c7b32dd8c61ef593a0e6529210db89f608b938c6ea9f87fb3a5792fca7f4e32 datapathConfiguration="&{false false false false false }" interface=lxcc95586fc697f k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-dfhbg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c7b32dd8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-dfhbg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c7b32dd8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-dfhbg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c7b32dd8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identity=5846 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-dfhbg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c7b32dd8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identity=5846 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-dfhbg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c7b32dd8c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1020 identity=5846 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-dfhbg subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c7b32dd8c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1020 identity=5846 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-dfhbg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.167 54a10434-264f-4750-9b16-a04843279fc0 default }" containerID=a46bef2f72fbe70ad133e03db726b8e0f27e95aaaf54d55d9c7182e23aa2f4ab datapathConfiguration="&{false false false false false }" interface=lxc7ff2bfc35bca k8sPodName=openstack/pxc-operator-59d66cbc78-7w5dp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a46bef2f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7w5dp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a46bef2f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7w5dp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a46bef2f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.167 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7w5dp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a46bef2f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identity=60612 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7w5dp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a46bef2f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identity=60612 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7w5dp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a46bef2f72 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1606 identity=60612 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7w5dp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a46bef2f72 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1606 identity=60612 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7w5dp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.212 b30faabd-2a9e-491a-9275-eaafa950e25b default }" containerID=0aae6d6e4b2a6156491c0213d571de8ef1242309cbb5627516e6a11b382faf88 datapathConfiguration="&{false false false false false }" interface=lxc7413858fa548 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0aae6d6e4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0aae6d6e4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0aae6d6e4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0aae6d6e4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identity=27999 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0aae6d6e4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identity=27999 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 9f648e56-2c30-4dc2-a43d-24fb3ec76794 default }" containerID=b168e67d24c4726e76829ba9605a9891e648b44bf987fd31f9251ec6f22826a6 datapathConfiguration="&{false false false false false }" interface=lxcd417846c2b25 k8sPodName=local-path-storage/helper-pod-create-pvc-26733e9e-6831-479c-b72f-3ce7f6f70615 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b168e67d24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26733e9e-6831-479c-b72f-3ce7f6f70615 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b168e67d24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26733e9e-6831-479c-b72f-3ce7f6f70615 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b168e67d24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identity=26751 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26733e9e-6831-479c-b72f-3ce7f6f70615 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b168e67d24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identity=26751 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26733e9e-6831-479c-b72f-3ce7f6f70615 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0aae6d6e4b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=148 identity=27999 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0aae6d6e4b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=148 identity=27999 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b168e67d24 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1503 identity=26751 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26733e9e-6831-479c-b72f-3ce7f6f70615 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b168e67d24 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1503 identity=26751 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26733e9e-6831-479c-b72f-3ce7f6f70615 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b168e67d24 endpointID=1503 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-26733e9e-6831-479c-b72f-3ce7f6f70615 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b168e67d24 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1503 identity=26751 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26733e9e-6831-479c-b72f-3ce7f6f70615 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 b147aaae-0e31-4402-a2e1-6e68725bbf90 default }" containerID=0275f40e3574270bb1ff8cb5c6829372cb4c93580286fc0ad7df94ed2f342585 datapathConfiguration="&{false false false false false }" interface=lxc2ef1d8e7ca44 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0275f40e35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0275f40e35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0275f40e35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identity=15274 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0275f40e35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identity=15274 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0275f40e35 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=415 identity=15274 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0275f40e35 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=415 identity=15274 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 66398f55-1644-4a80-8092-db97fc8efba7 default }" containerID=6124b9c4df71b93852933b7648fba41cdcd7418fcffcf3c8151597ab0c043e00 datapathConfiguration="&{false false false false false }" interface=lxcc52f76d38fe5 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6124b9c4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 ipv4=10.0.0.127 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6124b9c4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.127 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6124b9c4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identity=1286 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.127 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6124b9c4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identity=1286 ipv4=10.0.0.127 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6124b9c4df datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1410 identity=1286 ipv4=10.0.0.127 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6124b9c4df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1410 identity=1286 ipv4=10.0.0.127 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 1af91ba9-ea87-4e94-9be7-359854d51afc default }" containerID=bf3a7c07ebd7dd7e1ed568d00613ab05c01ecd4a48a9bccd3b28dcb8090c010c datapathConfiguration="&{false false false false false }" interface=lxc637ec731a0c7 k8sPodName=monitoring/node-feature-discovery-worker-n8c68 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.19 46c23546-ebb5-4638-9214-b42986a926e7 default }" containerID=aabddf744e3689f4b94b12b935932329263d1927e0b574d146f88a036de205e8 datapathConfiguration="&{false false false false false }" interface=lxc6d52c7bec13a k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-2txsk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf3a7c07eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n8c68 subsys=endpoint level=info msg="New endpoint" containerID=aabddf744e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-2txsk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf3a7c07eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n8c68 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=aabddf744e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-2txsk subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf3a7c07eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=5912 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n8c68 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf3a7c07eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=5912 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n8c68 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aabddf744e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-2txsk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aabddf744e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identity=23876 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-2txsk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aabddf744e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identity=23876 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-2txsk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf3a7c07eb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=154 identity=5912 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n8c68 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf3a7c07eb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=154 identity=5912 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n8c68 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aabddf744e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=114 identity=23876 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-2txsk subsys=endpoint level=info msg="Successful endpoint creation" containerID=aabddf744e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=114 identity=23876 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-2txsk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.218 98ef8fbc-40ba-4127-91ac-d615125344ac default }" containerID=a9a3387fd02f43ee340b99dfed2e4d2f22378eefa2a63a5b980a7c599e1cdf79 datapathConfiguration="&{false false false false false }" interface=lxc5d7654cb5e3b k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jv288 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9a3387fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 ipv4=10.0.0.218 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jv288 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9a3387fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.218 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jv288 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9a3387fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identity=45617 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.218 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jv288 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9a3387fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identity=45617 ipv4=10.0.0.218 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jv288 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9a3387fd0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=370 identity=45617 ipv4=10.0.0.218 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jv288 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9a3387fd0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=370 identity=45617 ipv4=10.0.0.218 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jv288 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1999 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SCE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01999 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01999 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01999 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01999:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1999 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.012211370676478147 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.119 8c0e5b60-a5d2-482f-b5ed-956719593db8 default }" containerID=0f6aca4100bd5c7c82579827338c06b08ec68700194414b7dba679b1bc37b3e5 datapathConfiguration="&{false false false false false }" interface=lxcc204a6967e63 k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx2xr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f6aca4100 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx2xr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f6aca4100 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=f6aa4f58-9191-4537-b809-396eff9d3380,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=f6aa4f58-9191-4537-b809-396eff9d3380,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx2xr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=f6aa4f58-9191-4537-b809-396eff9d3380;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=f6aa4f58-9191-4537-b809-396eff9d3380;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f6aca4100 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=32741 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=f6aa4f58-9191-4537-b809-396eff9d3380,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=f6aa4f58-9191-4537-b809-396eff9d3380,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx2xr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f6aca4100 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=32741 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx2xr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0f6aca4100 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=639 identity=32741 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx2xr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f6aca4100 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=639 identity=32741 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx2xr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f6aca4100 endpointID=639 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-sx2xr subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=f6aa4f58-9191-4537-b809-396eff9d3380 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=f6aa4f58-9191-4537-b809-396eff9d3380 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0f6aca4100 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=639 identity=32741 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sx2xr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 6e868822-a9a0-48c7-8578-ebdbae8b1f18 default }" containerID=9b4d43b52a2318685a8f9ed5004d16f8aa6282c349a4b5e85005cfef35444512 datapathConfiguration="&{false false false false false }" interface=lxcbbcbc0982119 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-zsc5l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b4d43b52a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-zsc5l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b4d43b52a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-zsc5l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9b4d43b52a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 identity=14575 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-zsc5l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b4d43b52a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 identity=14575 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-zsc5l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b4d43b52a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3704 identity=14575 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-zsc5l subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b4d43b52a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3704 identity=14575 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-zsc5l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.76 7480a711-2c72-4e0a-9b60-63385dce02d1 default }" containerID=198cf039948b5529104aa10dcfeae4fb2ad34bfc7fffa80f7f70d6ef2e9872ae datapathConfiguration="&{false false false false false }" interface=lxca550cf4b1355 k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gj4hz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=198cf03994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gj4hz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 3f7e2f61-abf3-41db-b96a-2eb83f565041 default }" containerID=7ed7d6d239f94cc720c310e547f46b31d58e5de5cf2a6542e8d238f7214660e0 datapathConfiguration="&{false false false false false }" interface=lxcfabc82681cae k8sPodName=monitoring/kube-prometheus-stack-grafana-8f8dc679f-v5qqm labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=198cf03994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gj4hz subsys=endpoint level=info msg="New endpoint" containerID=7ed7d6d239 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8f8dc679f-v5qqm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=7ed7d6d239 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8f8dc679f-v5qqm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=198cf03994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 identity=17409 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gj4hz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=198cf03994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 identity=17409 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gj4hz subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ed7d6d239 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=38277 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8f8dc679f-v5qqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ed7d6d239 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=38277 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8f8dc679f-v5qqm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=198cf03994 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=497 identity=17409 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gj4hz subsys=endpoint level=info msg="Successful endpoint creation" containerID=198cf03994 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=497 identity=17409 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gj4hz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7ed7d6d239 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=839 identity=38277 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8f8dc679f-v5qqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ed7d6d239 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=839 identity=38277 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8f8dc679f-v5qqm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.177 1ec90099-4399-42c2-91e9-5b3e76ab6dc8 default }" containerID=60c25b67db27058783f3d74d523a6cbb9cdbb36a6d0c1db9ef3b0551762d7e90 datapathConfiguration="&{false false false false false }" interface=lxc124a80232dab k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h597z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60c25b67db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h597z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60c25b67db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=53611c74-1e71-40d6-b5b4-210868d59bd8,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=53611c74-1e71-40d6-b5b4-210868d59bd8,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h597z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=53611c74-1e71-40d6-b5b4-210868d59bd8;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=53611c74-1e71-40d6-b5b4-210868d59bd8;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60c25b67db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identity=62923 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=53611c74-1e71-40d6-b5b4-210868d59bd8,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=53611c74-1e71-40d6-b5b4-210868d59bd8,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h597z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60c25b67db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identity=62923 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h597z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60c25b67db datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=389 identity=62923 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h597z subsys=endpoint level=info msg="Successful endpoint creation" containerID=60c25b67db datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=389 identity=62923 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h597z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60c25b67db endpointID=389 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-h597z subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=53611c74-1e71-40d6-b5b4-210868d59bd8 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=53611c74-1e71-40d6-b5b4-210868d59bd8 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=60c25b67db datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=389 identity=62923 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h597z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 b2da4d8f-3755-4f21-848c-4b4dd44f7c97 default }" containerID=ae879d98e571997ac3302d9242388e484ee8c47953d56a6a691fcbfed6116556 datapathConfiguration="&{false false false false false }" interface=lxc292a52028047 k8sPodName=local-path-storage/helper-pod-create-pvc-10c79916-2d2c-4a83-ab97-8df55efb837a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae879d98e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10c79916-2d2c-4a83-ab97-8df55efb837a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae879d98e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10c79916-2d2c-4a83-ab97-8df55efb837a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae879d98e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identity=26751 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10c79916-2d2c-4a83-ab97-8df55efb837a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae879d98e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identity=26751 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10c79916-2d2c-4a83-ab97-8df55efb837a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae879d98e5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3285 identity=26751 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10c79916-2d2c-4a83-ab97-8df55efb837a subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae879d98e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3285 identity=26751 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10c79916-2d2c-4a83-ab97-8df55efb837a subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 e1536ab7-3a17-4abd-967a-f464e9e32353 default }" containerID=b41c3c8ad52e8ee74ad498bac86dfe96d0a5a9e28f809642e2394659f31f6bef datapathConfiguration="&{false false false false false }" interface=lxc74dedb6a5e2b k8sPodName=local-path-storage/helper-pod-create-pvc-608dc7ca-245f-447d-8d9d-8349170f613b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b41c3c8ad5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-608dc7ca-245f-447d-8d9d-8349170f613b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b41c3c8ad5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-608dc7ca-245f-447d-8d9d-8349170f613b subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b41c3c8ad5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=26751 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-608dc7ca-245f-447d-8d9d-8349170f613b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b41c3c8ad5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=26751 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-608dc7ca-245f-447d-8d9d-8349170f613b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b41c3c8ad5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1108 identity=26751 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-608dc7ca-245f-447d-8d9d-8349170f613b subsys=endpoint level=info msg="Successful endpoint creation" containerID=b41c3c8ad5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1108 identity=26751 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-608dc7ca-245f-447d-8d9d-8349170f613b subsys=daemon level=info msg="Delete endpoint request" containerID=b41c3c8ad5 endpointID=1108 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-608dc7ca-245f-447d-8d9d-8349170f613b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=ae879d98e5 endpointID=3285 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-10c79916-2d2c-4a83-ab97-8df55efb837a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b41c3c8ad5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1108 identity=26751 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-608dc7ca-245f-447d-8d9d-8349170f613b subsys=endpoint level=info msg="Removed endpoint" containerID=ae879d98e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3285 identity=26751 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10c79916-2d2c-4a83-ab97-8df55efb837a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 fa6088b0-9a5c-4349-8e2e-81c384d9ff61 default }" containerID=45e5906dcbbd19b7644884c67b0ad0d45e579baf0326424ff1ff5fb779a0d792 datapathConfiguration="&{false false false false false }" interface=lxc1fe825c850eb k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45e5906dcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45e5906dcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=45e5906dcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identity=43657 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45e5906dcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identity=43657 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45e5906dcb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3285 identity=43657 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45e5906dcb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3285 identity=43657 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.24 a29fe170-f8c0-4dce-884a-6ce2d0affdd1 default }" containerID=03c0dde82a7bbf8c43176c372972f9973f0f3f709cf6d1747e30632d59904f21 datapathConfiguration="&{false false false false false }" interface=lxcd04441dbfe1d k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03c0dde82a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03c0dde82a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03c0dde82a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identity=36263 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03c0dde82a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identity=36263 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03c0dde82a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=296 identity=36263 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=03c0dde82a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=296 identity=36263 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.114 1b1e9f08-d873-4f85-9271-be5e919e9669 default }" containerID=68325bae890da77baf9b9d00e62c4219a2785efcf4dc9517a2ab8d4d4b9b02fe datapathConfiguration="&{false false false false false }" interface=lxcfd44eb2db47f k8sPodName=monitoring/loki-gateway-5cc45946cd-lhmlb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68325bae89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3369 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-lhmlb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68325bae89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3369 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-lhmlb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68325bae89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3369 identity=61171 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-lhmlb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68325bae89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3369 identity=61171 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-lhmlb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 395c295f-b032-4704-ba42-b779e1fb0cf5 default }" containerID=12ff0af1c8bd18e91ce6e0ff428dfa933da2a38aa28e8d42c3aceb0f0ffa7f02 datapathConfiguration="&{false false false false false }" interface=lxcfb5ec022d3e3 k8sPodName=local-path-storage/helper-pod-create-pvc-ff1264eb-1593-42e6-a19c-df65adab1fa6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12ff0af1c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1441 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff1264eb-1593-42e6-a19c-df65adab1fa6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12ff0af1c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1441 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff1264eb-1593-42e6-a19c-df65adab1fa6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12ff0af1c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1441 identity=26751 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff1264eb-1593-42e6-a19c-df65adab1fa6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12ff0af1c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1441 identity=26751 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff1264eb-1593-42e6-a19c-df65adab1fa6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=68325bae89 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3369 identity=61171 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-lhmlb subsys=endpoint level=info msg="Successful endpoint creation" containerID=68325bae89 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3369 identity=61171 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-lhmlb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=12ff0af1c8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1441 identity=26751 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff1264eb-1593-42e6-a19c-df65adab1fa6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=12ff0af1c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1441 identity=26751 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff1264eb-1593-42e6-a19c-df65adab1fa6 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.131 dc0e9fef-da1a-440c-8755-a106639aa722 default }" containerID=d72ceca50bb7a0810153030c1b982e17ba5ea780404bb891e958cd6039cf3cad datapathConfiguration="&{false false false false false }" interface=lxc91e79307eb7d k8sPodName=monitoring/vector-gxzmz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d72ceca50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-gxzmz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d72ceca50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-gxzmz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d72ceca50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identity=25170 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-gxzmz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d72ceca50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identity=25170 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-gxzmz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d72ceca50b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=146 identity=25170 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-gxzmz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d72ceca50b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=146 identity=25170 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-gxzmz subsys=daemon level=info msg="Delete endpoint request" containerID=12ff0af1c8 endpointID=1441 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ff1264eb-1593-42e6-a19c-df65adab1fa6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=12ff0af1c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1441 identity=26751 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff1264eb-1593-42e6-a19c-df65adab1fa6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.153 a725f73a-0ab6-4df4-b146-a0e86a5fac31 default }" containerID=50a4411753a52c62c764dd4947b260a96941c485116891df0326756e60e4d581 datapathConfiguration="&{false false false false false }" interface=lxce8bac8f41d93 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50a4411753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3985 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50a4411753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3985 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=50a4411753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3985 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50a4411753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3985 identity=17171 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50a4411753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3985 identity=17171 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50a4411753 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3985 identity=17171 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=50a4411753 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3985 identity=17171 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.63 4dc288cc-c5dd-4fb3-b110-028a461b2c30 default }" containerID=5383deb59c8650ce9eb9be10ce7f3fbf7d7f7c262b23508db7fe9206a657e628 datapathConfiguration="&{false false false false false }" interface=lxc0328a0daa3b5 k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-vnxl4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5383deb59c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3638 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-vnxl4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5383deb59c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3638 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-vnxl4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=prometheus-pushgateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=prometheus-pushgateway;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5383deb59c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3638 identity=25519 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-vnxl4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5383deb59c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3638 identity=25519 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-vnxl4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5383deb59c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3638 identity=25519 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-vnxl4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5383deb59c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3638 identity=25519 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-vnxl4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.243 1292c2a5-1f26-4b84-a1c4-dcde1d45d9a7 default }" containerID=7210943067d4c9989788a1a7422d9a0062f240f46281ba9d8626f14c197b138c datapathConfiguration="&{false false false false false }" interface=lxcefb9967239dc k8sPodName=openstack/memcached-memcached-c47d949f5-zt9h6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7210943067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-zt9h6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7210943067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-zt9h6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7210943067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 identity=31924 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-zt9h6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7210943067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 identity=31924 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-zt9h6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7210943067 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3976 identity=31924 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-zt9h6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7210943067 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3976 identity=31924 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-zt9h6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 5f9d27c2-f9c6-4223-a0b3-bb8d7617d2e1 default }" containerID=ba9a36ad382a048639b2eee0ea944d51d77f904d50960f8c5bbd13eb91fcf1cc datapathConfiguration="&{false false false false false }" interface=lxc0f9c72a6fe6a k8sPodName=local-path-storage/helper-pod-create-pvc-056ef3d9-2d42-4415-95bb-8ee795bfb84a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba9a36ad38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-056ef3d9-2d42-4415-95bb-8ee795bfb84a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba9a36ad38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-056ef3d9-2d42-4415-95bb-8ee795bfb84a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba9a36ad38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identity=26751 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-056ef3d9-2d42-4415-95bb-8ee795bfb84a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba9a36ad38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identity=26751 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-056ef3d9-2d42-4415-95bb-8ee795bfb84a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba9a36ad38 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=288 identity=26751 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-056ef3d9-2d42-4415-95bb-8ee795bfb84a subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba9a36ad38 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=288 identity=26751 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-056ef3d9-2d42-4415-95bb-8ee795bfb84a subsys=daemon level=info msg="Delete endpoint request" containerID=ba9a36ad38 endpointID=288 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-056ef3d9-2d42-4415-95bb-8ee795bfb84a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ba9a36ad38 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=288 identity=26751 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-056ef3d9-2d42-4415-95bb-8ee795bfb84a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 d1ce6008-4449-4542-9862-b6eedf4a80e3 default }" containerID=6d26ba4cccaa2db56f74b759e8988f2b315037ee45f2623989f9fa70689f949f datapathConfiguration="&{false false false false false }" interface=lxc409d0a0d47b4 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d26ba4ccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d26ba4ccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d26ba4ccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identity=63439 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d26ba4ccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identity=63439 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d26ba4ccc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1648 identity=63439 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d26ba4ccc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1648 identity=63439 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.13 417ed141-7fd7-4a3c-8970-eedbc6e8c994 default }" containerID=58150fb7c188f5eb5baa0b9cb26099be38d6b4022214680f1acce48ef56974e6 datapathConfiguration="&{false false false false false }" interface=lxc6643ae188516 k8sPodName=openstack/keystone-api-7459b65dbd-tk4dd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58150fb7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-api-7459b65dbd-tk4dd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58150fb7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-api-7459b65dbd-tk4dd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58150fb7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identity=3173 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-api-7459b65dbd-tk4dd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=58150fb7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identity=3173 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-api-7459b65dbd-tk4dd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58150fb7c1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2181 identity=3173 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-api-7459b65dbd-tk4dd subsys=endpoint level=info msg="Successful endpoint creation" containerID=58150fb7c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2181 identity=3173 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-api-7459b65dbd-tk4dd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 d61828d3-2527-44e5-8072-aa229e76d8fa default }" containerID=c83d7a333e85826189b3cd81e64548c0df0429f81adcca48a00b08a608e9c3de datapathConfiguration="&{false false false false false }" interface=lxce4d45ee6c9fe k8sPodName=openstack/keystone-credential-setup-ftglb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c83d7a333e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-credential-setup-ftglb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c83d7a333e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c537fef6-7ac0-45ce-81c1-3a0fd5c056ad,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=c537fef6-7ac0-45ce-81c1-3a0fd5c056ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-credential-setup-ftglb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c537fef6-7ac0-45ce-81c1-3a0fd5c056ad;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=c537fef6-7ac0-45ce-81c1-3a0fd5c056ad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c83d7a333e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identity=15050 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c537fef6-7ac0-45ce-81c1-3a0fd5c056ad,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=c537fef6-7ac0-45ce-81c1-3a0fd5c056ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-credential-setup-ftglb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c83d7a333e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identity=15050 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-credential-setup-ftglb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c83d7a333e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2567 identity=15050 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-credential-setup-ftglb subsys=endpoint level=info msg="Successful endpoint creation" containerID=c83d7a333e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2567 identity=15050 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-credential-setup-ftglb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c83d7a333e endpointID=2567 k8sNamespace=openstack k8sPodName=keystone-credential-setup-ftglb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c537fef6-7ac0-45ce-81c1-3a0fd5c056ad k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=c537fef6-7ac0-45ce-81c1-3a0fd5c056ad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c83d7a333e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2567 identity=15050 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-credential-setup-ftglb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 50476924-cebf-4c34-9b72-a8dd21834f32 default }" containerID=064fface68aa968dabcb660bc6a8c9b8e7031866f708ab27e44c7ef285c7240a datapathConfiguration="&{false false false false false }" interface=lxc639239b31c40 k8sPodName=openstack/keystone-db-init-4qrnr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=064fface68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-init-4qrnr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=064fface68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=90f1e331-46b6-4b4f-acf1-02cf1d8707bf,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=90f1e331-46b6-4b4f-acf1-02cf1d8707bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-init-4qrnr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=90f1e331-46b6-4b4f-acf1-02cf1d8707bf;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=90f1e331-46b6-4b4f-acf1-02cf1d8707bf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=064fface68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 identity=27745 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=90f1e331-46b6-4b4f-acf1-02cf1d8707bf,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=90f1e331-46b6-4b4f-acf1-02cf1d8707bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-init-4qrnr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=064fface68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 identity=27745 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-init-4qrnr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=064fface68 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=679 identity=27745 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-init-4qrnr subsys=endpoint level=info msg="Successful endpoint creation" containerID=064fface68 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=679 identity=27745 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-init-4qrnr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=064fface68 endpointID=679 k8sNamespace=openstack k8sPodName=keystone-db-init-4qrnr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=90f1e331-46b6-4b4f-acf1-02cf1d8707bf k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=90f1e331-46b6-4b4f-acf1-02cf1d8707bf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=064fface68 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=679 identity=27745 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-init-4qrnr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 e109311a-907c-4595-8c9b-77d38a8ddedb default }" containerID=64cfea5e624faa60ad1f3f893d2d56a24b4cc3ba928d4ae3da1b7e673a7cdad9 datapathConfiguration="&{false false false false false }" interface=lxca5ab4f994650 k8sPodName=openstack/keystone-fernet-setup-zwscw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64cfea5e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1602 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-zwscw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64cfea5e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1602 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3592676e-3b89-4959-b5ca-8595a56ebd8a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=3592676e-3b89-4959-b5ca-8595a56ebd8a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-zwscw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=64cfea5e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1602 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-zwscw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3592676e-3b89-4959-b5ca-8595a56ebd8a;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=3592676e-3b89-4959-b5ca-8595a56ebd8a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64cfea5e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1602 identity=23403 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3592676e-3b89-4959-b5ca-8595a56ebd8a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=3592676e-3b89-4959-b5ca-8595a56ebd8a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-zwscw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64cfea5e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1602 identity=23403 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-zwscw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64cfea5e62 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1602 identity=23403 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-zwscw subsys=endpoint level=info msg="Successful endpoint creation" containerID=64cfea5e62 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1602 identity=23403 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-zwscw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=64cfea5e62 endpointID=1602 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-zwscw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3592676e-3b89-4959-b5ca-8595a56ebd8a k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=3592676e-3b89-4959-b5ca-8595a56ebd8a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=64cfea5e62 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1602 identity=23403 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-zwscw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 e71f6378-3cd3-45de-8505-2ef0f371d202 default }" containerID=866774b082b55044e3dddcc43b2866dbf3b8a010dd02e44bff0219aac9854ebe datapathConfiguration="&{false false false false false }" interface=lxc36abe5a8748f k8sPodName=openstack/keystone-db-sync-wknsx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=866774b082 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-db-sync-wknsx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=866774b082 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a2d2801b-dd65-4221-b692-aac25a99bdb6,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=a2d2801b-dd65-4221-b692-aac25a99bdb6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-db-sync-wknsx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a2d2801b-dd65-4221-b692-aac25a99bdb6;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=a2d2801b-dd65-4221-b692-aac25a99bdb6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=866774b082 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identity=44841 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a2d2801b-dd65-4221-b692-aac25a99bdb6,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=a2d2801b-dd65-4221-b692-aac25a99bdb6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-db-sync-wknsx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=866774b082 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identity=44841 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-db-sync-wknsx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=866774b082 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2408 identity=44841 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-db-sync-wknsx subsys=endpoint level=info msg="Successful endpoint creation" containerID=866774b082 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2408 identity=44841 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-db-sync-wknsx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=866774b082 endpointID=2408 k8sNamespace=openstack k8sPodName=keystone-db-sync-wknsx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a2d2801b-dd65-4221-b692-aac25a99bdb6 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=a2d2801b-dd65-4221-b692-aac25a99bdb6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=866774b082 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2408 identity=44841 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-db-sync-wknsx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 f6ac1611-7cdf-4830-8837-fdd1d2a55a00 default }" containerID=c6418c38c676599094fcd297b26df73132733c297d033d7be677af7b92256541 datapathConfiguration="&{false false false false false }" interface=lxc3c06bb4341d0 k8sPodName=openstack/keystone-rabbit-init-6r4m2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6418c38c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-rabbit-init-6r4m2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6418c38c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=243eae1e-1bcf-4701-976e-476d259d814d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=243eae1e-1bcf-4701-976e-476d259d814d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-rabbit-init-6r4m2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=243eae1e-1bcf-4701-976e-476d259d814d;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=243eae1e-1bcf-4701-976e-476d259d814d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6418c38c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identity=36907 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=243eae1e-1bcf-4701-976e-476d259d814d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=243eae1e-1bcf-4701-976e-476d259d814d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-rabbit-init-6r4m2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c6418c38c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identity=36907 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-rabbit-init-6r4m2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6418c38c6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1118 identity=36907 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-rabbit-init-6r4m2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6418c38c6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1118 identity=36907 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-rabbit-init-6r4m2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c6418c38c6 endpointID=1118 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-6r4m2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=243eae1e-1bcf-4701-976e-476d259d814d k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=243eae1e-1bcf-4701-976e-476d259d814d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c6418c38c6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1118 identity=36907 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-rabbit-init-6r4m2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 a80f6372-3e36-4c88-a4a5-940652a82e34 default }" containerID=abd3a0335a19cde695d6485907ef9b14b2f4e6bf89b30713f4d518f8b18a6ed0 datapathConfiguration="&{false false false false false }" interface=lxc39f47d72597d k8sPodName=openstack/keystone-domain-manage-qldpd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abd3a0335a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3507 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-domain-manage-qldpd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abd3a0335a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3507 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d95aa63e-665b-4509-ac21-80dd45d83310,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d95aa63e-665b-4509-ac21-80dd45d83310,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-domain-manage-qldpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d95aa63e-665b-4509-ac21-80dd45d83310;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=d95aa63e-665b-4509-ac21-80dd45d83310;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abd3a0335a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3507 identity=17117 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d95aa63e-665b-4509-ac21-80dd45d83310,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d95aa63e-665b-4509-ac21-80dd45d83310,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-domain-manage-qldpd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=abd3a0335a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3507 identity=17117 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-domain-manage-qldpd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abd3a0335a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3507 identity=17117 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-domain-manage-qldpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=abd3a0335a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3507 identity=17117 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-domain-manage-qldpd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=abd3a0335a endpointID=3507 k8sNamespace=openstack k8sPodName=keystone-domain-manage-qldpd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d95aa63e-665b-4509-ac21-80dd45d83310 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=d95aa63e-665b-4509-ac21-80dd45d83310 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=abd3a0335a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3507 identity=17117 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-domain-manage-qldpd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 67f913e0-9bc5-45f7-b383-2d7f82f89067 default }" containerID=a3e3584f181a99f239cc077a21f03c687bcde47b91655f3b60a66ced99b7de01 datapathConfiguration="&{false false false false false }" interface=lxcb3c4e2900192 k8sPodName=openstack/keystone-bootstrap-r7d6m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3e3584f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-bootstrap-r7d6m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3e3584f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0fb5bf3e-7bda-463b-9e83-d69b3e358e38,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0fb5bf3e-7bda-463b-9e83-d69b3e358e38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-bootstrap-r7d6m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a3e3584f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-bootstrap-r7d6m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0fb5bf3e-7bda-463b-9e83-d69b3e358e38;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=0fb5bf3e-7bda-463b-9e83-d69b3e358e38;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3e3584f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identity=26425 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0fb5bf3e-7bda-463b-9e83-d69b3e358e38,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0fb5bf3e-7bda-463b-9e83-d69b3e358e38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-bootstrap-r7d6m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3e3584f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identity=26425 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-bootstrap-r7d6m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a3e3584f18 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1334 identity=26425 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-bootstrap-r7d6m subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3e3584f18 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1334 identity=26425 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-bootstrap-r7d6m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a3e3584f18 endpointID=1334 k8sNamespace=openstack k8sPodName=keystone-bootstrap-r7d6m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0fb5bf3e-7bda-463b-9e83-d69b3e358e38 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=0fb5bf3e-7bda-463b-9e83-d69b3e358e38 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a3e3584f18 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1334 identity=26425 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-bootstrap-r7d6m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 369cf39f-6e8f-42ce-a4a9-83c1b3948402 default }" containerID=594438dc17df6bdd5462afb904615876521eb0490ea4fd6bac7d9675ab580ce9 datapathConfiguration="&{false false false false false }" interface=lxc1534511698d2 k8sPodName=local-path-storage/helper-pod-create-pvc-54a202ac-f68d-468a-83fe-6720867d1d83 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=594438dc17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54a202ac-f68d-468a-83fe-6720867d1d83 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=594438dc17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54a202ac-f68d-468a-83fe-6720867d1d83 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=594438dc17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 identity=26751 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54a202ac-f68d-468a-83fe-6720867d1d83 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=594438dc17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 identity=26751 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54a202ac-f68d-468a-83fe-6720867d1d83 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=594438dc17 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1715 identity=26751 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54a202ac-f68d-468a-83fe-6720867d1d83 subsys=endpoint level=info msg="Successful endpoint creation" containerID=594438dc17 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1715 identity=26751 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54a202ac-f68d-468a-83fe-6720867d1d83 subsys=daemon level=info msg="Delete endpoint request" containerID=594438dc17 endpointID=1715 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-54a202ac-f68d-468a-83fe-6720867d1d83 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=594438dc17 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1715 identity=26751 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54a202ac-f68d-468a-83fe-6720867d1d83 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 d93490b6-b029-4270-8e5f-07422c0524f6 default }" containerID=c0fd8792ddc9e10c7658f95e236fccaac2191ec1760ee3c23dfc3241cf930e8f datapathConfiguration="&{false false false false false }" interface=lxca3b886c7d170 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0fd8792dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0fd8792dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0fd8792dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 identity=33721 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0fd8792dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 identity=33721 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c0fd8792dd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3086 identity=33721 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0fd8792dd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3086 identity=33721 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 dddc6188-56b2-4c0c-bb58-cd12f80d3310 default }" containerID=250218038811de45cf7f67da38578e23e9b95ec1db513a77bbb95433c5e3b5e6 datapathConfiguration="&{false false false false false }" interface=lxc849bb67d1971 k8sPodName=openstack/barbican-api-556ff6697f-xz98l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2502180388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4048 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-556ff6697f-xz98l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2502180388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4048 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-556ff6697f-xz98l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2502180388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4048 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-556ff6697f-xz98l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2502180388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4048 identity=1932 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-556ff6697f-xz98l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2502180388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4048 identity=1932 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-556ff6697f-xz98l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 145567c9-3d46-4deb-9812-18a9b1ecf026 default }" containerID=7dad9e18e4b314c53026f0d82821e5a475aa900f9eb59b0f8aef2067c092b7dc datapathConfiguration="&{false false false false false }" interface=lxc9ffc55ae82b9 k8sPodName=openstack/barbican-db-init-n45dx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7dad9e18e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-db-init-n45dx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7dad9e18e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b5a439c4-4c5a-4246-adf7-92aff155aeb0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b5a439c4-4c5a-4246-adf7-92aff155aeb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-db-init-n45dx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b5a439c4-4c5a-4246-adf7-92aff155aeb0;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=b5a439c4-4c5a-4246-adf7-92aff155aeb0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7dad9e18e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identity=35546 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b5a439c4-4c5a-4246-adf7-92aff155aeb0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b5a439c4-4c5a-4246-adf7-92aff155aeb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-db-init-n45dx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7dad9e18e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identity=35546 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-db-init-n45dx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2502180388 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4048 identity=1932 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-556ff6697f-xz98l subsys=endpoint level=info msg="Successful endpoint creation" containerID=2502180388 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4048 identity=1932 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-556ff6697f-xz98l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7dad9e18e4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3476 identity=35546 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-db-init-n45dx subsys=endpoint level=info msg="Successful endpoint creation" containerID=7dad9e18e4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3476 identity=35546 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-db-init-n45dx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7dad9e18e4 endpointID=3476 k8sNamespace=openstack k8sPodName=barbican-db-init-n45dx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b5a439c4-4c5a-4246-adf7-92aff155aeb0 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=b5a439c4-4c5a-4246-adf7-92aff155aeb0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7dad9e18e4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3476 identity=35546 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-db-init-n45dx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 45112cb8-8d06-43d5-94b5-236e5a55da1f default }" containerID=de64c74ae0742f3c6474a9b18a6b11fb90ad56e41e7f2c452338a15209a8f12a datapathConfiguration="&{false false false false false }" interface=lxcd8522dbb0ec1 k8sPodName=openstack/barbican-db-sync-zjv5n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de64c74ae0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3443 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-db-sync-zjv5n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de64c74ae0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3443 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cf40cddc-17d8-421c-9309-be15b17d57fb,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=cf40cddc-17d8-421c-9309-be15b17d57fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-db-sync-zjv5n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cf40cddc-17d8-421c-9309-be15b17d57fb;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=cf40cddc-17d8-421c-9309-be15b17d57fb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de64c74ae0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3443 identity=15475 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cf40cddc-17d8-421c-9309-be15b17d57fb,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=cf40cddc-17d8-421c-9309-be15b17d57fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-db-sync-zjv5n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de64c74ae0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3443 identity=15475 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-db-sync-zjv5n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=de64c74ae0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3443 identity=15475 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-db-sync-zjv5n subsys=endpoint level=info msg="Successful endpoint creation" containerID=de64c74ae0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3443 identity=15475 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-db-sync-zjv5n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de64c74ae0 endpointID=3443 k8sNamespace=openstack k8sPodName=barbican-db-sync-zjv5n subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cf40cddc-17d8-421c-9309-be15b17d57fb k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=cf40cddc-17d8-421c-9309-be15b17d57fb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=de64c74ae0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3443 identity=15475 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-db-sync-zjv5n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 6ca8c260-95ba-42cc-90a8-f570cf6132e5 default }" containerID=cb081e9eaafc74b9380fe711b981d49727ac8f2939a7af03fd9497f18e54e05b datapathConfiguration="&{false false false false false }" interface=lxcfdde65b805ae k8sPodName=openstack/barbican-rabbit-init-mqx9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb081e9eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2041 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqx9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb081e9eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2041 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=95c846ba-c4e2-4485-b24e-d89455d8b3f8,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=95c846ba-c4e2-4485-b24e-d89455d8b3f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqx9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cb081e9eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2041 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqx9d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=95c846ba-c4e2-4485-b24e-d89455d8b3f8;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=95c846ba-c4e2-4485-b24e-d89455d8b3f8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb081e9eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2041 identity=9764 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=95c846ba-c4e2-4485-b24e-d89455d8b3f8,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=95c846ba-c4e2-4485-b24e-d89455d8b3f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqx9d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb081e9eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2041 identity=9764 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqx9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb081e9eaa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2041 identity=9764 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqx9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb081e9eaa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2041 identity=9764 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqx9d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb081e9eaa endpointID=2041 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-mqx9d subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=95c846ba-c4e2-4485-b24e-d89455d8b3f8 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=95c846ba-c4e2-4485-b24e-d89455d8b3f8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=cb081e9eaa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2041 identity=9764 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqx9d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 11434e70-a1f4-46d9-aacd-f38d3ef9a201 default }" containerID=85d8f6f17a0ad29babe1dd5f0c4b8d211a651567f2ede74ea412fcab9ee814d9 datapathConfiguration="&{false false false false false }" interface=lxc5212609470eb k8sPodName=openstack/barbican-ks-service-8qk85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85d8f6f17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-service-8qk85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85d8f6f17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f143984f-3ba6-415c-a427-52c7280c60b6,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=f143984f-3ba6-415c-a427-52c7280c60b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-service-8qk85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f143984f-3ba6-415c-a427-52c7280c60b6;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=f143984f-3ba6-415c-a427-52c7280c60b6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85d8f6f17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identity=47686 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f143984f-3ba6-415c-a427-52c7280c60b6,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=f143984f-3ba6-415c-a427-52c7280c60b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-service-8qk85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85d8f6f17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identity=47686 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-service-8qk85 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=85d8f6f17a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=68 identity=47686 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-service-8qk85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=85d8f6f17a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=68 identity=47686 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-service-8qk85 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85d8f6f17a endpointID=68 k8sNamespace=openstack k8sPodName=barbican-ks-service-8qk85 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f143984f-3ba6-415c-a427-52c7280c60b6 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=f143984f-3ba6-415c-a427-52c7280c60b6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=85d8f6f17a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=68 identity=47686 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-service-8qk85 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 ac4c7155-dbcd-4b11-9aff-a4f8971aa03e default }" containerID=4ba01fd227b6048e54e0c89547afd4dab7c20124951debc235ba4d20a9714e47 datapathConfiguration="&{false false false false false }" interface=lxc3c68e5271f2b k8sPodName=openstack/barbican-ks-endpoints-s6q5v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ba01fd227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-s6q5v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ba01fd227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f4e6b9d9-b8ec-4a66-8e52-535b7bb955fb,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f4e6b9d9-b8ec-4a66-8e52-535b7bb955fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-s6q5v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f4e6b9d9-b8ec-4a66-8e52-535b7bb955fb;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f4e6b9d9-b8ec-4a66-8e52-535b7bb955fb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ba01fd227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=9619 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f4e6b9d9-b8ec-4a66-8e52-535b7bb955fb,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f4e6b9d9-b8ec-4a66-8e52-535b7bb955fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-s6q5v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ba01fd227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=9619 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-s6q5v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ba01fd227 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=103 identity=9619 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-s6q5v subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ba01fd227 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=103 identity=9619 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-s6q5v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4ba01fd227 endpointID=103 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-s6q5v subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f4e6b9d9-b8ec-4a66-8e52-535b7bb955fb k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f4e6b9d9-b8ec-4a66-8e52-535b7bb955fb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4ba01fd227 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=103 identity=9619 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-s6q5v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 04ab6325-3792-4782-8aec-4d219aa08d1f default }" containerID=c27e55e9a0c0775b7a209ccfdf0da96c2b8c1974aa5711866cdcdc986b653b85 datapathConfiguration="&{false false false false false }" interface=lxcb7920a1a912d k8sPodName=openstack/barbican-ks-user-hdkbw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c27e55e9a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-user-hdkbw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c27e55e9a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1402efe0-d36c-4f3e-a79f-ba7473aa942e,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=1402efe0-d36c-4f3e-a79f-ba7473aa942e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-user-hdkbw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1402efe0-d36c-4f3e-a79f-ba7473aa942e;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=1402efe0-d36c-4f3e-a79f-ba7473aa942e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c27e55e9a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identity=2277 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1402efe0-d36c-4f3e-a79f-ba7473aa942e,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=1402efe0-d36c-4f3e-a79f-ba7473aa942e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-user-hdkbw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c27e55e9a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identity=2277 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-user-hdkbw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c27e55e9a0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=119 identity=2277 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-user-hdkbw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c27e55e9a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=119 identity=2277 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-user-hdkbw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c27e55e9a0 endpointID=119 k8sNamespace=openstack k8sPodName=barbican-ks-user-hdkbw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1402efe0-d36c-4f3e-a79f-ba7473aa942e k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=1402efe0-d36c-4f3e-a79f-ba7473aa942e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c27e55e9a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=119 identity=2277 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-user-hdkbw subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.181 a90adb69-402a-4aca-9548-d72f36509ecc default }" containerID=a0abc9888070ef60f1d3b488eeb9ef6265b3f0656d58e68a3116c68f5d46f9ec datapathConfiguration="&{false false false false false }" interface=lxc12998f1cc4a1 k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-hrv2j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0abc98880 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 ipv4=10.0.0.181 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-hrv2j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0abc98880 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.181 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-hrv2j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.10.10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0abc98880 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identity=35230 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.181 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-hrv2j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0abc98880 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identity=35230 ipv4=10.0.0.181 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-hrv2j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a0abc98880 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1251 identity=35230 ipv4=10.0.0.181 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-hrv2j subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0abc98880 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1251 identity=35230 ipv4=10.0.0.181 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-hrv2j subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.193 0a653ea1-1db4-48e4-8399-fffd6609fb1f default }" containerID=552b34ada70e781d2b3e102eb1620aec479ad503885808c4cbba13190890806a datapathConfiguration="&{false false false false false }" interface=lxc62d9683ce76b k8sPodName=openstack/rook-ceph-detect-version-jqhgm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=552b34ada7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jqhgm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=552b34ada7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=11ccc482-355f-4b17-8c78-f5e6632136d4,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=11ccc482-355f-4b17-8c78-f5e6632136d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jqhgm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=11ccc482-355f-4b17-8c78-f5e6632136d4;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=11ccc482-355f-4b17-8c78-f5e6632136d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=552b34ada7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identity=13934 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=11ccc482-355f-4b17-8c78-f5e6632136d4,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=11ccc482-355f-4b17-8c78-f5e6632136d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jqhgm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=552b34ada7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identity=13934 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jqhgm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=552b34ada7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1586 identity=13934 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jqhgm subsys=endpoint level=info msg="Successful endpoint creation" containerID=552b34ada7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1586 identity=13934 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jqhgm subsys=daemon level=info msg="Delete endpoint request" containerID=552b34ada7 endpointID=1586 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-jqhgm subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=11ccc482-355f-4b17-8c78-f5e6632136d4 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=11ccc482-355f-4b17-8c78-f5e6632136d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=552b34ada7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1586 identity=13934 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jqhgm subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.037922545213521446 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.144 a364f6c6-9c0f-43e6-b376-19fdc46d53ea default }" containerID=180b65cf94fe9607df0a762fd78d4bef0e1830301943943a14d2cf6548feba8c datapathConfiguration="&{false false false false false }" interface=lxca64dd0798331 k8sPodName=local-path-storage/helper-pod-create-pvc-29aba3c2-0dd4-436a-a116-a33eb2655aed labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=180b65cf94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29aba3c2-0dd4-436a-a116-a33eb2655aed subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=180b65cf94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29aba3c2-0dd4-436a-a116-a33eb2655aed subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=180b65cf94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identity=26751 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29aba3c2-0dd4-436a-a116-a33eb2655aed oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=180b65cf94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identity=26751 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29aba3c2-0dd4-436a-a116-a33eb2655aed subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=180b65cf94 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1011 identity=26751 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29aba3c2-0dd4-436a-a116-a33eb2655aed subsys=endpoint level=info msg="Successful endpoint creation" containerID=180b65cf94 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1011 identity=26751 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29aba3c2-0dd4-436a-a116-a33eb2655aed subsys=daemon level=info msg="Delete endpoint request" containerID=180b65cf94 endpointID=1011 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-29aba3c2-0dd4-436a-a116-a33eb2655aed subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=180b65cf94 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1011 identity=26751 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29aba3c2-0dd4-436a-a116-a33eb2655aed subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 677e0310-a739-4f67-86a0-20ebe9aceab8 default }" containerID=935a457543acf689e64f41493192a5020ec7acfff35be9e12ea7ec803319952d datapathConfiguration="&{false false false false false }" interface=lxc680bdaa6050a k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=935a457543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=935a457543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=935a457543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identity=13076 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=935a457543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identity=13076 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=935a457543 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1 identity=13076 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=935a457543 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1 identity=13076 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.169 05ece4b1-8ab3-486e-a489-91ec23e58fbe default }" containerID=85af7654dff26fc53981e44c4207cbc10a90a817b7b064b225294bd25d528e43 datapathConfiguration="&{false false false false false }" interface=lxc7799c846b8d9 k8sPodName=openstack/ceph-object-controller-detect-version-h9xfl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85af7654df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3308 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h9xfl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85af7654df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3308 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0ad341fa-437e-48a6-9d20-c8e74d0b7e1b,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0ad341fa-437e-48a6-9d20-c8e74d0b7e1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h9xfl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=0ad341fa-437e-48a6-9d20-c8e74d0b7e1b;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=0ad341fa-437e-48a6-9d20-c8e74d0b7e1b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85af7654df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3308 identity=63688 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0ad341fa-437e-48a6-9d20-c8e74d0b7e1b,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0ad341fa-437e-48a6-9d20-c8e74d0b7e1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h9xfl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=85af7654df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3308 identity=63688 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h9xfl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85af7654df datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3308 identity=63688 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h9xfl subsys=endpoint level=info msg="Successful endpoint creation" containerID=85af7654df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3308 identity=63688 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h9xfl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85af7654df endpointID=3308 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-h9xfl subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=0ad341fa-437e-48a6-9d20-c8e74d0b7e1b k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=0ad341fa-437e-48a6-9d20-c8e74d0b7e1b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=85af7654df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3308 identity=63688 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h9xfl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 b1c9a03b-760b-4ed2-824b-d37f91e03cdb default }" containerID=80fa64cca095c7b99292d76f263cb8c49b8dceb8a92d1b8479d8a66eb0f648e6 datapathConfiguration="&{false false false false false }" interface=lxcd8de4e681571 k8sPodName=openstack/glance-db-init-gmznz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80fa64cca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2855 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-gmznz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80fa64cca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2855 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b551c1de-b7cb-4b99-bb0b-2ff293e9b19c,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=b551c1de-b7cb-4b99-bb0b-2ff293e9b19c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-gmznz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b551c1de-b7cb-4b99-bb0b-2ff293e9b19c;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=b551c1de-b7cb-4b99-bb0b-2ff293e9b19c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=80fa64cca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2855 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-gmznz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=80fa64cca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2855 identity=22529 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b551c1de-b7cb-4b99-bb0b-2ff293e9b19c,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=b551c1de-b7cb-4b99-bb0b-2ff293e9b19c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-gmznz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80fa64cca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2855 identity=22529 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-gmznz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80fa64cca0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2855 identity=22529 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-gmznz subsys=endpoint level=info msg="Successful endpoint creation" containerID=80fa64cca0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2855 identity=22529 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-gmznz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=80fa64cca0 endpointID=2855 k8sNamespace=openstack k8sPodName=glance-db-init-gmznz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b551c1de-b7cb-4b99-bb0b-2ff293e9b19c k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=b551c1de-b7cb-4b99-bb0b-2ff293e9b19c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=80fa64cca0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2855 identity=22529 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-gmznz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 775bf54d-7106-4603-ab46-35de3d05736a default }" containerID=836c3d549f0a44fdcf8bfa841bbab7ec1edfe23120e9cffce746c6172ecc1a9f datapathConfiguration="&{false false false false false }" interface=lxc66d6aa2cb2d2 k8sPodName=openstack/glance-db-sync-zzr5s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=836c3d549f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-zzr5s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=836c3d549f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9d69e50f-5e7b-4a3d-afe4-51911fb458b4,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=9d69e50f-5e7b-4a3d-afe4-51911fb458b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-zzr5s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9d69e50f-5e7b-4a3d-afe4-51911fb458b4;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=9d69e50f-5e7b-4a3d-afe4-51911fb458b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=836c3d549f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=53933 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9d69e50f-5e7b-4a3d-afe4-51911fb458b4,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=9d69e50f-5e7b-4a3d-afe4-51911fb458b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-zzr5s oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=836c3d549f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=53933 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-zzr5s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=836c3d549f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=548 identity=53933 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-zzr5s subsys=endpoint level=info msg="Successful endpoint creation" containerID=836c3d549f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=548 identity=53933 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-zzr5s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=836c3d549f endpointID=548 k8sNamespace=openstack k8sPodName=glance-db-sync-zzr5s subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9d69e50f-5e7b-4a3d-afe4-51911fb458b4 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=9d69e50f-5e7b-4a3d-afe4-51911fb458b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=836c3d549f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=548 identity=53933 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-zzr5s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 a07897d0-68c9-448c-9f38-1a10fbfa3f34 default }" containerID=41db56a43ebb6e4f046a3392374a40f599f022e9ed39b19c320c021376f6e4f5 datapathConfiguration="&{false false false false false }" interface=lxcc86e49033bc6 k8sPodName=openstack/glance-rabbit-init-r5jxn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41db56a43e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-rabbit-init-r5jxn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41db56a43e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e977f293-adf1-4619-aaec-41e4d715fa6c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e977f293-adf1-4619-aaec-41e4d715fa6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-rabbit-init-r5jxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=41db56a43e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-rabbit-init-r5jxn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e977f293-adf1-4619-aaec-41e4d715fa6c;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e977f293-adf1-4619-aaec-41e4d715fa6c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41db56a43e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 identity=37643 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e977f293-adf1-4619-aaec-41e4d715fa6c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e977f293-adf1-4619-aaec-41e4d715fa6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-rabbit-init-r5jxn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41db56a43e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 identity=37643 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-rabbit-init-r5jxn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41db56a43e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3921 identity=37643 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-rabbit-init-r5jxn subsys=endpoint level=info msg="Successful endpoint creation" containerID=41db56a43e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3921 identity=37643 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-rabbit-init-r5jxn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41db56a43e endpointID=3921 k8sNamespace=openstack k8sPodName=glance-rabbit-init-r5jxn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e977f293-adf1-4619-aaec-41e4d715fa6c k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e977f293-adf1-4619-aaec-41e4d715fa6c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=41db56a43e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3921 identity=37643 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-rabbit-init-r5jxn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 5478c126-ac0d-490f-9c94-0b3f2f4d1551 default }" containerID=6cb513a465bcc8c1ca6526805e95f0fa0b066c0c5c8eab2498df9034946d7c89 datapathConfiguration="&{false false false false false }" interface=lxc3ef09a06f20c k8sPodName=openstack/glance-ks-service-62lcm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cb513a465 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3421 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-service-62lcm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cb513a465 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3421 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c83629db-9c07-4f36-a359-fe448d95119d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c83629db-9c07-4f36-a359-fe448d95119d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-service-62lcm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c83629db-9c07-4f36-a359-fe448d95119d;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=c83629db-9c07-4f36-a359-fe448d95119d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cb513a465 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3421 identity=29879 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c83629db-9c07-4f36-a359-fe448d95119d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c83629db-9c07-4f36-a359-fe448d95119d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-service-62lcm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cb513a465 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3421 identity=29879 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-service-62lcm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6cb513a465 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3421 identity=29879 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-service-62lcm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cb513a465 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3421 identity=29879 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-service-62lcm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6cb513a465 endpointID=3421 k8sNamespace=openstack k8sPodName=glance-ks-service-62lcm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c83629db-9c07-4f36-a359-fe448d95119d k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=c83629db-9c07-4f36-a359-fe448d95119d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6cb513a465 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3421 identity=29879 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-service-62lcm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 f95a752d-42e1-4644-8081-4c319dbccff6 default }" containerID=30d3d29e44ab032f879dd8a96eaed5fe0375221c3e8f6ca9508c96d45f298c36 datapathConfiguration="&{false false false false false }" interface=lxc628ebb31174d k8sPodName=openstack/glance-ks-endpoints-fvsn7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30d3d29e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-fvsn7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30d3d29e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7aa6873b-1071-408a-8048-58e86ae83e89,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7aa6873b-1071-408a-8048-58e86ae83e89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-fvsn7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7aa6873b-1071-408a-8048-58e86ae83e89;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7aa6873b-1071-408a-8048-58e86ae83e89;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30d3d29e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=8670 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7aa6873b-1071-408a-8048-58e86ae83e89,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7aa6873b-1071-408a-8048-58e86ae83e89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-fvsn7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30d3d29e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=8670 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-fvsn7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30d3d29e44 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=418 identity=8670 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-fvsn7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=30d3d29e44 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=418 identity=8670 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-fvsn7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=30d3d29e44 endpointID=418 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-fvsn7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7aa6873b-1071-408a-8048-58e86ae83e89 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7aa6873b-1071-408a-8048-58e86ae83e89 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=30d3d29e44 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=418 identity=8670 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-fvsn7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 b7dfe60b-5651-4817-a3ae-e6773264d637 default }" containerID=9c971c35ab5c7f8fd40b3fa372586abc4b6f7f88693e33d7b9746906a871cd04 datapathConfiguration="&{false false false false false }" interface=lxc781d8f49691a k8sPodName=openstack/glance-ks-user-cgl59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c971c35ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-ks-user-cgl59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c971c35ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4f08f643-dc63-4de2-a1fc-f0a80acbdc24,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=4f08f643-dc63-4de2-a1fc-f0a80acbdc24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-ks-user-cgl59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4f08f643-dc63-4de2-a1fc-f0a80acbdc24;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=4f08f643-dc63-4de2-a1fc-f0a80acbdc24;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c971c35ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identity=3428 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4f08f643-dc63-4de2-a1fc-f0a80acbdc24,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=4f08f643-dc63-4de2-a1fc-f0a80acbdc24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-ks-user-cgl59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c971c35ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identity=3428 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-ks-user-cgl59 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c971c35ab datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3807 identity=3428 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-ks-user-cgl59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c971c35ab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3807 identity=3428 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-ks-user-cgl59 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.116 c67949aa-39bf-4616-9e04-d5d06269a313 default }" containerID=ca6cb6a9819c64048ee1061403d83554bd4d9a81e50ee93fcd05300aefc4a2ad datapathConfiguration="&{false false false false false }" interface=lxc7e386a9dbe45 k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-n5gfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca6cb6a981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-n5gfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca6cb6a981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-n5gfh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ca6cb6a981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-n5gfh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ca6cb6a981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=19341 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-n5gfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca6cb6a981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=19341 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-n5gfh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 8e7ff593-6c26-4588-9679-3a963425b8b3 default }" containerID=5db35e08773bebb72d144d73cb02c2fbb11d362cb6d09934ac2a421211a8cdf1 datapathConfiguration="&{false false false false false }" interface=lxc6e5be8f1dff7 k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-rqkhf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5db35e0877 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3931 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-rqkhf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5db35e0877 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3931 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-rqkhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook-version=v1.10.10;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5db35e0877 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3931 identity=26099 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-rqkhf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5db35e0877 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3931 identity=26099 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-rqkhf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca6cb6a981 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=178 identity=19341 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-n5gfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca6cb6a981 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=178 identity=19341 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-n5gfh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5db35e0877 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3931 identity=26099 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-rqkhf subsys=endpoint level=info msg="Successful endpoint creation" containerID=5db35e0877 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3931 identity=26099 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-rqkhf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9c971c35ab endpointID=3807 k8sNamespace=openstack k8sPodName=glance-ks-user-cgl59 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4f08f643-dc63-4de2-a1fc-f0a80acbdc24 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=4f08f643-dc63-4de2-a1fc-f0a80acbdc24 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9c971c35ab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3807 identity=3428 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-ks-user-cgl59 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 83707aa9-a2e2-4665-96f5-8eb3ffc247a2 default }" containerID=c9ff2b5b2e9f7f6608a241ede4bf2c88fd43d0dba9a84e6bcff4b6650af9c48e datapathConfiguration="&{false false false false false }" interface=lxc8429770849ea k8sPodName=openstack/glance-metadefs-load-hqc4v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9ff2b5b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-hqc4v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9ff2b5b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=08acbe91-8011-4e9b-baf2-3eecd2851f19,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=08acbe91-8011-4e9b-baf2-3eecd2851f19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-hqc4v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=08acbe91-8011-4e9b-baf2-3eecd2851f19;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=08acbe91-8011-4e9b-baf2-3eecd2851f19;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9ff2b5b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=28599 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=08acbe91-8011-4e9b-baf2-3eecd2851f19,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=08acbe91-8011-4e9b-baf2-3eecd2851f19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-hqc4v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c9ff2b5b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=28599 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-hqc4v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9ff2b5b2e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1922 identity=28599 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-hqc4v subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9ff2b5b2e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1922 identity=28599 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-hqc4v subsys=daemon level=info msg="Delete endpoint request" containerID=c9ff2b5b2e endpointID=1922 k8sNamespace=openstack k8sPodName=glance-metadefs-load-hqc4v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=08acbe91-8011-4e9b-baf2-3eecd2851f19 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=08acbe91-8011-4e9b-baf2-3eecd2851f19 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c9ff2b5b2e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1922 identity=28599 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-hqc4v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 8591cf32-5842-46d0-a896-80eebdd3a907 default }" containerID=8e46bf71ace7ea6a48205f532cbcfe77930e64e3d96e0b439d0cb21e97f31e7c datapathConfiguration="&{false false false false false }" interface=lxc915e90f55f53 k8sPodName=openstack/glance-storage-init-m87fh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e46bf71ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-m87fh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e46bf71ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=733f4b8e-9ccd-4871-a97d-9ae20137d107,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=733f4b8e-9ccd-4871-a97d-9ae20137d107,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-m87fh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8e46bf71ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-m87fh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=733f4b8e-9ccd-4871-a97d-9ae20137d107;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=733f4b8e-9ccd-4871-a97d-9ae20137d107;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e46bf71ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=62046 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=733f4b8e-9ccd-4871-a97d-9ae20137d107,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=733f4b8e-9ccd-4871-a97d-9ae20137d107,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-m87fh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e46bf71ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=62046 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-m87fh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e46bf71ac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1922 identity=62046 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-m87fh subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e46bf71ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1922 identity=62046 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-m87fh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e46bf71ac endpointID=1922 k8sNamespace=openstack k8sPodName=glance-storage-init-m87fh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=733f4b8e-9ccd-4871-a97d-9ae20137d107 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=733f4b8e-9ccd-4871-a97d-9ae20137d107 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8e46bf71ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1922 identity=62046 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-m87fh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 372ffe24-fb91-4a4f-b3d8-799702081250 default }" containerID=c793960a555e7ba068317e4b3470888965e86029eb1eadacfb5b39e73e208d25 datapathConfiguration="&{false false false false false }" interface=lxc4d067f2771f3 k8sPodName=openstack/glance-api-7f44b76598-qcgzw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c793960a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-7f44b76598-qcgzw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c793960a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-7f44b76598-qcgzw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c793960a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-7f44b76598-qcgzw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c793960a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identity=14991 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-7f44b76598-qcgzw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c793960a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identity=14991 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-7f44b76598-qcgzw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c793960a55 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1454 identity=14991 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-7f44b76598-qcgzw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c793960a55 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1454 identity=14991 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-7f44b76598-qcgzw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 c6be1d96-4482-4869-a747-b4226c644377 default }" containerID=196aa9b14f25ad76d88f8cc7cebb64c37cbc093c481d06da871b1ceec7e9bcbe datapathConfiguration="&{false false false false false }" interface=lxc421f4973d395 k8sPodName=openstack/staffeln-conductor-7c846bd48c-wvslj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=196aa9b14f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-conductor-7c846bd48c-wvslj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=196aa9b14f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-conductor-7c846bd48c-wvslj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=196aa9b14f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=18761 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-conductor-7c846bd48c-wvslj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=196aa9b14f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=18761 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-conductor-7c846bd48c-wvslj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 8d2eed15-0200-4d67-bb44-247cdbb055dc default }" containerID=26d35c481dfe34b8276b2b1917324757883e60e4f6dc039679d2f50c74af229d datapathConfiguration="&{false false false false false }" interface=lxc8853bf06b17f k8sPodName=openstack/staffeln-api-5898b45576-x7vz8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26d35c481d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-5898b45576-x7vz8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26d35c481d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-5898b45576-x7vz8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26d35c481d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identity=6920 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-5898b45576-x7vz8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26d35c481d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identity=6920 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-5898b45576-x7vz8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=196aa9b14f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=599 identity=18761 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-conductor-7c846bd48c-wvslj subsys=endpoint level=info msg="Successful endpoint creation" containerID=196aa9b14f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=599 identity=18761 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-conductor-7c846bd48c-wvslj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.105 e3f88d58-9851-4d1f-822e-401f7014c6bd default }" containerID=b82632c1ca14254732679057e1ac210c4b9216966c9506f45f72eb53a5002897 datapathConfiguration="&{false false false false false }" interface=lxcd6d48aa0cc44 k8sPodName=openstack/staffeln-db-init-bj8bz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b82632c1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/staffeln-db-init-bj8bz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b82632c1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c46e98e9-e98b-4deb-8460-ac4686e90687,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=c46e98e9-e98b-4deb-8460-ac4686e90687,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/staffeln-db-init-bj8bz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=c46e98e9-e98b-4deb-8460-ac4686e90687;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=c46e98e9-e98b-4deb-8460-ac4686e90687;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b82632c1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identity=6760 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c46e98e9-e98b-4deb-8460-ac4686e90687,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=c46e98e9-e98b-4deb-8460-ac4686e90687,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/staffeln-db-init-bj8bz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b82632c1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identity=6760 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/staffeln-db-init-bj8bz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26d35c481d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3236 identity=6920 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-5898b45576-x7vz8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=26d35c481d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3236 identity=6920 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-5898b45576-x7vz8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b82632c1ca datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=996 identity=6760 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/staffeln-db-init-bj8bz subsys=endpoint level=info msg="Successful endpoint creation" containerID=b82632c1ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=996 identity=6760 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/staffeln-db-init-bj8bz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b82632c1ca endpointID=996 k8sNamespace=openstack k8sPodName=staffeln-db-init-bj8bz subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=c46e98e9-e98b-4deb-8460-ac4686e90687 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=c46e98e9-e98b-4deb-8460-ac4686e90687 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=b82632c1ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=996 identity=6760 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/staffeln-db-init-bj8bz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 24fb416c-607d-4523-874a-c0d84e7110a4 default }" containerID=0a57030ce308f6ecbc37bef70963b072bf65d92fbac43f6b879da84f7d30c201 datapathConfiguration="&{false false false false false }" interface=lxcec8a1a3f9a87 k8sPodName=openstack/staffeln-db-sync-qzcfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a57030ce3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1060 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-sync-qzcfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a57030ce3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1060 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=abfed132-92fa-4f29-a5fc-347045b64628,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=abfed132-92fa-4f29-a5fc-347045b64628,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-sync-qzcfh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0a57030ce3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1060 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-sync-qzcfh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=abfed132-92fa-4f29-a5fc-347045b64628;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=abfed132-92fa-4f29-a5fc-347045b64628;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a57030ce3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1060 identity=59448 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=abfed132-92fa-4f29-a5fc-347045b64628,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=abfed132-92fa-4f29-a5fc-347045b64628,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-sync-qzcfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a57030ce3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1060 identity=59448 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-sync-qzcfh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a57030ce3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1060 identity=59448 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-sync-qzcfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a57030ce3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1060 identity=59448 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-sync-qzcfh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager