level=info msg="Memory available for map entries (0.003% of 16764960768B): 41912401B" subsys=config
level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config
level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config
level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config
level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config
level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config
level=info msg="  --agent-health-port='9879'" subsys=daemon
level=info msg="  --agent-labels=''" subsys=daemon
level=info msg="  --agent-liveness-update-interval='1s'" subsys=daemon
level=info msg="  --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon
level=info msg="  --allocator-list-timeout='3m0s'" subsys=daemon
level=info msg="  --allow-icmp-frag-needed='true'" subsys=daemon
level=info msg="  --allow-localhost='auto'" subsys=daemon
level=info msg="  --annotate-k8s-node='false'" subsys=daemon
level=info msg="  --api-rate-limit=''" subsys=daemon
level=info msg="  --arping-refresh-period='30s'" subsys=daemon
level=info msg="  --auto-create-cilium-node-resource='true'" subsys=daemon
level=info msg="  --auto-direct-node-routes='false'" subsys=daemon
level=info msg="  --bgp-announce-lb-ip='false'" subsys=daemon
level=info msg="  --bgp-announce-pod-cidr='false'" subsys=daemon
level=info msg="  --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon
level=info msg="  --bpf-auth-map-max='524288'" subsys=daemon
level=info msg="  --bpf-ct-global-any-max='262144'" subsys=daemon
level=info msg="  --bpf-ct-global-tcp-max='524288'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-any='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon
level=info msg="  --bpf-filter-priority='1'" subsys=daemon
level=info msg="  --bpf-fragments-map-max='8192'" subsys=daemon
level=info msg="  --bpf-lb-acceleration='disabled'" subsys=daemon
level=info msg="  --bpf-lb-affinity-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-algorithm='random'" subsys=daemon
level=info msg="  --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon
level=info msg="  --bpf-lb-dsr-dispatch='opt'" subsys=daemon
level=info msg="  --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon
level=info msg="  --bpf-lb-external-clusterip='false'" subsys=daemon
level=info msg="  --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon
level=info msg="  --bpf-lb-maglev-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-maglev-table-size='16381'" subsys=daemon
level=info msg="  --bpf-lb-map-max='65536'" subsys=daemon
level=info msg="  --bpf-lb-mode='snat'" subsys=daemon
level=info msg="  --bpf-lb-rev-nat-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon
level=info msg="  --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon
level=info msg="  --bpf-lb-service-backend-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-service-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-sock='false'" subsys=daemon
level=info msg="  --bpf-lb-sock-hostns-only='false'" subsys=daemon
level=info msg="  --bpf-lb-source-range-map-max='0'" subsys=daemon
level=info msg="  --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon
level=info msg="  --bpf-map-event-buffers=''" subsys=daemon
level=info msg="  --bpf-nat-global-max='524288'" subsys=daemon
level=info msg="  --bpf-neigh-global-max='524288'" subsys=daemon
level=info msg="  --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon
level=info msg="  --bpf-policy-map-max='16384'" subsys=daemon
level=info msg="  --bpf-root='/sys/fs/bpf'" subsys=daemon
level=info msg="  --bpf-sock-rev-map-max='262144'" subsys=daemon
level=info msg="  --bypass-ip-availability-upon-restore='false'" subsys=daemon
level=info msg="  --certificates-directory='/var/run/cilium/certs'" subsys=daemon
level=info msg="  --cflags=''" subsys=daemon
level=info msg="  --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon
level=info msg="  --cilium-endpoint-gc-interval='5m0s'" subsys=daemon
level=info msg="  --cluster-health-port='4240'" subsys=daemon
level=info msg="  --cluster-id='0'" subsys=daemon
level=info msg="  --cluster-name='default'" subsys=daemon
level=info msg="  --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon
level=info msg="  --cluster-pool-ipv4-mask-size='24'" subsys=daemon
level=info msg="  --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon
level=info msg="  --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon
level=info msg="  --cmdref=''" subsys=daemon
level=info msg="  --cni-chaining-mode='none'" subsys=daemon
level=info msg="  --cni-chaining-target=''" subsys=daemon
level=info msg="  --cni-exclusive='true'" subsys=daemon
level=info msg="  --cni-external-routing='false'" subsys=daemon
level=info msg="  --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon
level=info msg="  --cnp-node-status-gc-interval='0s'" subsys=daemon
level=info msg="  --config=''" subsys=daemon
level=info msg="  --config-dir='/tmp/cilium/config-map'" subsys=daemon
level=info msg="  --config-sources='config-map:kube-system/cilium-config'" subsys=daemon
level=info msg="  --conntrack-gc-interval='0s'" subsys=daemon
level=info msg="  --conntrack-gc-max-interval='0s'" subsys=daemon
level=info msg="  --crd-wait-timeout='5m0s'" subsys=daemon
level=info msg="  --custom-cni-conf='false'" subsys=daemon
level=info msg="  --datapath-mode='veth'" subsys=daemon
level=info msg="  --debug='false'" subsys=daemon
level=info msg="  --debug-verbose=''" subsys=daemon
level=info msg="  --derive-masquerade-ip-addr-from-device=''" subsys=daemon
level=info msg="  --devices=''" subsys=daemon
level=info msg="  --direct-routing-device=''" subsys=daemon
level=info msg="  --disable-cnp-status-updates='true'" subsys=daemon
level=info msg="  --disable-endpoint-crd='false'" subsys=daemon
level=info msg="  --disable-envoy-version-check='false'" subsys=daemon
level=info msg="  --disable-iptables-feeder-rules=''" subsys=daemon
level=info msg="  --dns-max-ips-per-restored-rule='1000'" subsys=daemon
level=info msg="  --dns-policy-unload-on-shutdown='false'" subsys=daemon
level=info msg="  --dnsproxy-concurrency-limit='0'" subsys=daemon
level=info msg="  --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon
level=info msg="  --dnsproxy-enable-transparent-mode='true'" subsys=daemon
level=info msg="  --dnsproxy-lock-count='128'" subsys=daemon
level=info msg="  --dnsproxy-lock-timeout='500ms'" subsys=daemon
level=info msg="  --egress-gateway-policy-map-max='16384'" subsys=daemon
level=info msg="  --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon
level=info msg="  --egress-masquerade-interfaces=''" subsys=daemon
level=info msg="  --egress-multi-home-ip-rule-compat='false'" subsys=daemon
level=info msg="  --enable-auto-protect-node-port-range='true'" subsys=daemon
level=info msg="  --enable-bandwidth-manager='false'" subsys=daemon
level=info msg="  --enable-bbr='false'" subsys=daemon
level=info msg="  --enable-bgp-control-plane='false'" subsys=daemon
level=info msg="  --enable-bpf-clock-probe='false'" subsys=daemon
level=info msg="  --enable-bpf-masquerade='false'" subsys=daemon
level=info msg="  --enable-bpf-tproxy='false'" subsys=daemon
level=info msg="  --enable-cilium-api-server-access='*'" subsys=daemon
level=info msg="  --enable-cilium-endpoint-slice='false'" subsys=daemon
level=info msg="  --enable-cilium-health-api-server-access='*'" subsys=daemon
level=info msg="  --enable-custom-calls='false'" subsys=daemon
level=info msg="  --enable-endpoint-health-checking='true'" subsys=daemon
level=info msg="  --enable-endpoint-routes='false'" subsys=daemon
level=info msg="  --enable-envoy-config='false'" subsys=daemon
level=info msg="  --enable-external-ips='false'" subsys=daemon
level=info msg="  --enable-health-check-nodeport='true'" subsys=daemon
level=info msg="  --enable-health-checking='true'" subsys=daemon
level=info msg="  --enable-high-scale-ipcache='false'" subsys=daemon
level=info msg="  --enable-host-firewall='false'" subsys=daemon
level=info msg="  --enable-host-legacy-routing='false'" subsys=daemon
level=info msg="  --enable-host-port='false'" subsys=daemon
level=info msg="  --enable-hubble='false'" subsys=daemon
level=info msg="  --enable-hubble-recorder-api='true'" subsys=daemon
level=info msg="  --enable-icmp-rules='true'" subsys=daemon
level=info msg="  --enable-identity-mark='true'" subsys=daemon
level=info msg="  --enable-ip-masq-agent='false'" subsys=daemon
level=info msg="  --enable-ipsec='false'" subsys=daemon
level=info msg="  --enable-ipsec-key-watcher='true'" subsys=daemon
level=info msg="  --enable-ipv4='true'" subsys=daemon
level=info msg="  --enable-ipv4-big-tcp='false'" subsys=daemon
level=info msg="  --enable-ipv4-egress-gateway='false'" subsys=daemon
level=info msg="  --enable-ipv4-fragment-tracking='true'" subsys=daemon
level=info msg="  --enable-ipv4-masquerade='true'" subsys=daemon
level=info msg="  --enable-ipv6='false'" subsys=daemon
level=info msg="  --enable-ipv6-big-tcp='false'" subsys=daemon
level=info msg="  --enable-ipv6-masquerade='true'" subsys=daemon
level=info msg="  --enable-ipv6-ndp='false'" subsys=daemon
level=info msg="  --enable-k8s='true'" subsys=daemon
level=info msg="  --enable-k8s-api-discovery='false'" subsys=daemon
level=info msg="  --enable-k8s-endpoint-slice='true'" subsys=daemon
level=info msg="  --enable-k8s-event-handover='false'" subsys=daemon
level=info msg="  --enable-k8s-networkpolicy='true'" subsys=daemon
level=info msg="  --enable-k8s-terminating-endpoint='true'" subsys=daemon
level=info msg="  --enable-l2-announcements='false'" subsys=daemon
level=info msg="  --enable-l2-neigh-discovery='true'" subsys=daemon
level=info msg="  --enable-l2-pod-announcements='false'" subsys=daemon
level=info msg="  --enable-l7-proxy='true'" subsys=daemon
level=info msg="  --enable-local-node-route='true'" subsys=daemon
level=info msg="  --enable-local-redirect-policy='false'" subsys=daemon
level=info msg="  --enable-mke='false'" subsys=daemon
level=info msg="  --enable-monitor='true'" subsys=daemon
level=info msg="  --enable-nat46x64-gateway='false'" subsys=daemon
level=info msg="  --enable-node-port='false'" subsys=daemon
level=info msg="  --enable-pmtu-discovery='false'" subsys=daemon
level=info msg="  --enable-policy='default'" subsys=daemon
level=info msg="  --enable-recorder='false'" subsys=daemon
level=info msg="  --enable-remote-node-identity='true'" subsys=daemon
level=info msg="  --enable-runtime-device-detection='false'" subsys=daemon
level=info msg="  --enable-sctp='false'" subsys=daemon
level=info msg="  --enable-service-topology='false'" subsys=daemon
level=info msg="  --enable-session-affinity='false'" subsys=daemon
level=info msg="  --enable-srv6='false'" subsys=daemon
level=info msg="  --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon
level=info msg="  --enable-svc-source-range-check='true'" subsys=daemon
level=info msg="  --enable-tracing='false'" subsys=daemon
level=info msg="  --enable-unreachable-routes='false'" subsys=daemon
level=info msg="  --enable-vtep='false'" subsys=daemon
level=info msg="  --enable-well-known-identities='false'" subsys=daemon
level=info msg="  --enable-wireguard='false'" subsys=daemon
level=info msg="  --enable-wireguard-userspace-fallback='false'" subsys=daemon
level=info msg="  --enable-xdp-prefilter='false'" subsys=daemon
level=info msg="  --enable-xt-socket-fallback='true'" subsys=daemon
level=info msg="  --encrypt-interface=''" subsys=daemon
level=info msg="  --encrypt-node='false'" subsys=daemon
level=info msg="  --endpoint-gc-interval='5m0s'" subsys=daemon
level=info msg="  --endpoint-queue-size='25'" subsys=daemon
level=info msg="  --endpoint-status=''" subsys=daemon
level=info msg="  --envoy-config-timeout='2m0s'" subsys=daemon
level=info msg="  --envoy-log=''" subsys=daemon
level=info msg="  --exclude-local-address=''" subsys=daemon
level=info msg="  --external-envoy-proxy='false'" subsys=daemon
level=info msg="  --fixed-identity-mapping=''" subsys=daemon
level=info msg="  --fqdn-regex-compile-lru-size='1024'" subsys=daemon
level=info msg="  --gops-port='9890'" subsys=daemon
level=info msg="  --http-403-msg=''" subsys=daemon
level=info msg="  --http-idle-timeout='0'" subsys=daemon
level=info msg="  --http-max-grpc-timeout='0'" subsys=daemon
level=info msg="  --http-normalize-path='true'" subsys=daemon
level=info msg="  --http-request-timeout='3600'" subsys=daemon
level=info msg="  --http-retry-count='3'" subsys=daemon
level=info msg="  --http-retry-timeout='0'" subsys=daemon
level=info msg="  --hubble-disable-tls='false'" subsys=daemon
level=info msg="  --hubble-event-buffer-capacity='4095'" subsys=daemon
level=info msg="  --hubble-event-queue-size='0'" subsys=daemon
level=info msg="  --hubble-export-file-compress='false'" subsys=daemon
level=info msg="  --hubble-export-file-max-backups='5'" subsys=daemon
level=info msg="  --hubble-export-file-max-size-mb='10'" subsys=daemon
level=info msg="  --hubble-export-file-path=''" subsys=daemon
level=info msg="  --hubble-listen-address=''" subsys=daemon
level=info msg="  --hubble-metrics=''" subsys=daemon
level=info msg="  --hubble-metrics-server=''" subsys=daemon
level=info msg="  --hubble-monitor-events=''" subsys=daemon
level=info msg="  --hubble-prefer-ipv6='false'" subsys=daemon
level=info msg="  --hubble-recorder-sink-queue-size='1024'" subsys=daemon
level=info msg="  --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon
level=info msg="  --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon
level=info msg="  --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon
level=info msg="  --hubble-tls-cert-file=''" subsys=daemon
level=info msg="  --hubble-tls-client-ca-files=''" subsys=daemon
level=info msg="  --hubble-tls-key-file=''" subsys=daemon
level=info msg="  --identity-allocation-mode='crd'" subsys=daemon
level=info msg="  --identity-change-grace-period='5s'" subsys=daemon
level=info msg="  --identity-gc-interval='15m0s'" subsys=daemon
level=info msg="  --identity-heartbeat-timeout='30m0s'" subsys=daemon
level=info msg="  --identity-restore-grace-period='10m0s'" subsys=daemon
level=info msg="  --install-egress-gateway-routes='false'" subsys=daemon
level=info msg="  --install-iptables-rules='true'" subsys=daemon
level=info msg="  --install-no-conntrack-iptables-rules='false'" subsys=daemon
level=info msg="  --ip-allocation-timeout='2m0s'" subsys=daemon
level=info msg="  --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon
level=info msg="  --ipam='cluster-pool'" subsys=daemon
level=info msg="  --ipam-cilium-node-update-rate='15s'" subsys=daemon
level=info msg="  --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon
level=info msg="  --ipsec-key-file=''" subsys=daemon
level=info msg="  --ipsec-key-rotation-duration='5m0s'" subsys=daemon
level=info msg="  --iptables-lock-timeout='5s'" subsys=daemon
level=info msg="  --iptables-random-fully='false'" subsys=daemon
level=info msg="  --ipv4-native-routing-cidr=''" subsys=daemon
level=info msg="  --ipv4-node='auto'" subsys=daemon
level=info msg="  --ipv4-pod-subnets=''" subsys=daemon
level=info msg="  --ipv4-range='auto'" subsys=daemon
level=info msg="  --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon
level=info msg="  --ipv4-service-range='auto'" subsys=daemon
level=info msg="  --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon
level=info msg="  --ipv6-mcast-device=''" subsys=daemon
level=info msg="  --ipv6-native-routing-cidr=''" subsys=daemon
level=info msg="  --ipv6-node='auto'" subsys=daemon
level=info msg="  --ipv6-pod-subnets=''" subsys=daemon
level=info msg="  --ipv6-range='auto'" subsys=daemon
level=info msg="  --ipv6-service-range='auto'" subsys=daemon
level=info msg="  --join-cluster='false'" subsys=daemon
level=info msg="  --k8s-api-server=''" subsys=daemon
level=info msg="  --k8s-client-burst='10'" subsys=daemon
level=info msg="  --k8s-client-qps='5'" subsys=daemon
level=info msg="  --k8s-heartbeat-timeout='30s'" subsys=daemon
level=info msg="  --k8s-kubeconfig-path=''" subsys=daemon
level=info msg="  --k8s-namespace='kube-system'" subsys=daemon
level=info msg="  --k8s-require-ipv4-pod-cidr='false'" subsys=daemon
level=info msg="  --k8s-require-ipv6-pod-cidr='false'" subsys=daemon
level=info msg="  --k8s-service-cache-size='128'" subsys=daemon
level=info msg="  --k8s-service-proxy-name=''" subsys=daemon
level=info msg="  --k8s-sync-timeout='3m0s'" subsys=daemon
level=info msg="  --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon
level=info msg="  --keep-config='false'" subsys=daemon
level=info msg="  --kube-proxy-replacement='disabled'" subsys=daemon
level=info msg="  --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon
level=info msg="  --kvstore=''" subsys=daemon
level=info msg="  --kvstore-connectivity-timeout='2m0s'" subsys=daemon
level=info msg="  --kvstore-lease-ttl='15m0s'" subsys=daemon
level=info msg="  --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon
level=info msg="  --kvstore-opt=''" subsys=daemon
level=info msg="  --kvstore-periodic-sync='5m0s'" subsys=daemon
level=info msg="  --l2-announcements-lease-duration='15s'" subsys=daemon
level=info msg="  --l2-announcements-renew-deadline='5s'" subsys=daemon
level=info msg="  --l2-announcements-retry-period='2s'" subsys=daemon
level=info msg="  --l2-pod-announcements-interface=''" subsys=daemon
level=info msg="  --label-prefix-file=''" subsys=daemon
level=info msg="  --labels=''" subsys=daemon
level=info msg="  --lib-dir='/var/lib/cilium'" subsys=daemon
level=info msg="  --local-max-addr-scope='252'" subsys=daemon
level=info msg="  --local-router-ipv4=''" subsys=daemon
level=info msg="  --local-router-ipv6=''" subsys=daemon
level=info msg="  --log-driver=''" subsys=daemon
level=info msg="  --log-opt=''" subsys=daemon
level=info msg="  --log-system-load='false'" subsys=daemon
level=info msg="  --max-controller-interval='0'" subsys=daemon
level=info msg="  --mesh-auth-enabled='true'" subsys=daemon
level=info msg="  --mesh-auth-gc-interval='5m0s'" subsys=daemon
level=info msg="  --mesh-auth-mutual-listener-port='0'" subsys=daemon
level=info msg="  --mesh-auth-queue-size='1024'" subsys=daemon
level=info msg="  --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon
level=info msg="  --mesh-auth-signal-backoff-duration='1s'" subsys=daemon
level=info msg="  --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon
level=info msg="  --mesh-auth-spire-admin-socket=''" subsys=daemon
level=info msg="  --metrics=''" subsys=daemon
level=info msg="  --mke-cgroup-mount=''" subsys=daemon
level=info msg="  --monitor-aggregation='medium'" subsys=daemon
level=info msg="  --monitor-aggregation-flags='all'" subsys=daemon
level=info msg="  --monitor-aggregation-interval='5s'" subsys=daemon
level=info msg="  --monitor-queue-size='0'" subsys=daemon
level=info msg="  --mtu='0'" subsys=daemon
level=info msg="  --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon
level=info msg="  --node-port-acceleration='disabled'" subsys=daemon
level=info msg="  --node-port-algorithm='random'" subsys=daemon
level=info msg="  --node-port-bind-protection='true'" subsys=daemon
level=info msg="  --node-port-mode='snat'" subsys=daemon
level=info msg="  --node-port-range='30000,32767'" subsys=daemon
level=info msg="  --nodes-gc-interval='5m0s'" subsys=daemon
level=info msg="  --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon
level=info msg="  --policy-audit-mode='false'" subsys=daemon
level=info msg="  --policy-queue-size='100'" subsys=daemon
level=info msg="  --policy-trigger-interval='1s'" subsys=daemon
level=info msg="  --pprof='false'" subsys=daemon
level=info msg="  --pprof-address='localhost'" subsys=daemon
level=info msg="  --pprof-port='6060'" subsys=daemon
level=info msg="  --preallocate-bpf-maps='false'" subsys=daemon
level=info msg="  --prepend-iptables-chains='true'" subsys=daemon
level=info msg="  --procfs='/host/proc'" subsys=daemon
level=info msg="  --prometheus-serve-addr=':9962'" subsys=daemon
level=info msg="  --proxy-connect-timeout='2'" subsys=daemon
level=info msg="  --proxy-gid='1337'" subsys=daemon
level=info msg="  --proxy-idle-timeout-seconds='60'" subsys=daemon
level=info msg="  --proxy-max-connection-duration-seconds='0'" subsys=daemon
level=info msg="  --proxy-max-requests-per-connection='0'" subsys=daemon
level=info msg="  --proxy-prometheus-port='9964'" subsys=daemon
level=info msg="  --read-cni-conf=''" subsys=daemon
level=info msg="  --remove-cilium-node-taints='true'" subsys=daemon
level=info msg="  --restore='true'" subsys=daemon
level=info msg="  --route-metric='0'" subsys=daemon
level=info msg="  --routing-mode='tunnel'" subsys=daemon
level=info msg="  --set-cilium-is-up-condition='true'" subsys=daemon
level=info msg="  --set-cilium-node-taints='true'" subsys=daemon
level=info msg="  --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon
level=info msg="  --single-cluster-route='false'" subsys=daemon
level=info msg="  --skip-cnp-status-startup-clean='false'" subsys=daemon
level=info msg="  --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon
level=info msg="  --srv6-encap-mode='reduced'" subsys=daemon
level=info msg="  --state-dir='/var/run/cilium'" subsys=daemon
level=info msg="  --synchronize-k8s-nodes='true'" subsys=daemon
level=info msg="  --tofqdns-dns-reject-response-code='refused'" subsys=daemon
level=info msg="  --tofqdns-enable-dns-compression='true'" subsys=daemon
level=info msg="  --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon
level=info msg="  --tofqdns-idle-connection-grace-period='0s'" subsys=daemon
level=info msg="  --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon
level=info msg="  --tofqdns-min-ttl='0'" subsys=daemon
level=info msg="  --tofqdns-pre-cache=''" subsys=daemon
level=info msg="  --tofqdns-proxy-port='0'" subsys=daemon
level=info msg="  --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon
level=info msg="  --trace-payloadlen='128'" subsys=daemon
level=info msg="  --trace-sock='true'" subsys=daemon
level=info msg="  --tunnel=''" subsys=daemon
level=info msg="  --tunnel-port='6082'" subsys=daemon
level=info msg="  --tunnel-protocol='geneve'" subsys=daemon
level=info msg="  --unmanaged-pod-watcher-interval='15'" subsys=daemon
level=info msg="  --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon
level=info msg="  --version='false'" subsys=daemon
level=info msg="  --vlan-bpf-bypass=''" subsys=daemon
level=info msg="  --vtep-cidr=''" subsys=daemon
level=info msg="  --vtep-endpoint=''" subsys=daemon
level=info msg="  --vtep-mac=''" subsys=daemon
level=info msg="  --vtep-mask=''" subsys=daemon
level=info msg="  --wireguard-encapsulate='false'" subsys=daemon
level=info msg="  --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon
level=info msg="     _ _ _" subsys=daemon
level=info msg=" ___|_| |_|_ _ _____" subsys=daemon
level=info msg="|  _| | | | | |     |" subsys=daemon
level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon
level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon
level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath
level=info msg="linking environment: OK!" subsys=linux-datapath
level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes
level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf
level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups
level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter
level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter
level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter
level=info msg=" - reserved:.*" subsys=labels-filter
level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter
level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter
level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:io\\.kubernetes" subsys=labels-filter
level=info msg=" - !:kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:k8s\\.io" subsys=labels-filter
level=info msg=" - !:pod-template-generation" subsys=labels-filter
level=info msg=" - !:pod-template-hash" subsys=labels-filter
level=info msg=" - !:controller-revision-hash" subsys=labels-filter
level=info msg=" - !:annotation.*" subsys=labels-filter
level=info msg=" - !:etcd_node" subsys=labels-filter
level=info msg=Invoked duration=1.503882ms function="pprof.glob..func1 (cell.go:50)" subsys=hive
level=info msg=Invoked duration="235.869µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive
level=info msg=Invoked duration=1.583096ms function="metrics.NewRegistry (registry.go:65)" subsys=hive
level=info msg=Invoked duration="14.59µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive
level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate
level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth
level=info msg=Invoked duration=145.928675ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive
level=info msg=Invoked duration="16.44µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive
level=info msg=Invoked duration="24.751µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive
level=info msg=Invoked duration="142.196µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive
level=info msg=Invoked duration="168.496µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive
level=info msg=Invoked duration="211.378µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive
level=info msg=Starting subsys=hive
level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops
level=info msg="Start hook executed" duration="806.113µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive
level=info msg="Start hook executed" duration="2.55µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive
level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client
level=info msg="Serving prometheus metrics on :9962" subsys=metrics
level=info msg="Connected to apiserver" subsys=k8s-client
level=info msg="Start hook executed" duration=8.126167ms function="client.(*compositeClientset).onStart" subsys=hive
level=info msg="Start hook executed" duration=9.553815ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive
level=info msg="Start hook executed" duration="49.753µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive
level=info msg="Start hook executed" duration="52.732µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive
level=info msg="Start hook executed" duration="360.855µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive
level=info msg="Start hook executed" duration="123.825µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive
level=info msg="Start hook executed" duration="109.445µs" function="*cni.cniConfigManager.Start" subsys=hive
level=info msg="Generating CNI configuration file with mode none" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Generating CNI configuration file with mode none" subsys=cni-config
level=info msg="Start hook executed" duration=52.848419ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive
level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath
level=info msg="Start hook executed" duration="180.058µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive
level=info msg="Start hook executed" duration="41.861µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive
level=info msg="Start hook executed" duration="5.23µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive
level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.124.0.0/16
level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon
level=info msg="Start hook executed" duration=104.015968ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive
level=info msg="Start hook executed" duration="4.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive
level=info msg="Start hook executed" duration=201.107581ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive
level=info msg="Start hook executed" duration="25.211µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive
level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s
level=info msg="Start hook executed" duration=100.413788ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive
level=info msg="Start hook executed" duration="4.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive
level=info msg="Start hook executed" duration="1.98µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive
level=info msg="Start hook executed" duration="1.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="4.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="1.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive
level=info msg="Start hook executed" duration="60.383µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive
level=info msg="Start hook executed" duration="13.951µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive
level=info msg="Start hook executed" duration="22.88µs" function="*manager.manager.Start" subsys=hive
level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent
level=info msg="Start hook executed" duration="331.493µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive
level=info msg="Start hook executed" duration="4.181µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="7.871µs" function="*job.group.Start" subsys=hive
level=info msg="Start hook executed" duration="254.131µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive
level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager
level=info msg="Start hook executed" duration="368.774µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive
level=info msg="Datapath signal listener running" subsys=signal
level=info msg="Start hook executed" duration=1.253432ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive
level=info msg="Start hook executed" duration="4.191µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive
level=info msg="Start hook executed" duration="27.761µs" function="*job.group.Start" subsys=hive
level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon
level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon
level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.124 mtu=1500 subsys=mtu
level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf
level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf
level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service
level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service
level=info msg="Reading old endpoints..." subsys=daemon
level=info msg="No old endpoints found." subsys=daemon
level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s
level=info msg="All Cilium CRDs have been found and are available" subsys=k8s
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery
level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery
level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery
level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery
level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s
level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s
level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s
level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.124 ipAddr.ipv6="<nil>" k8sNodeIP=162.253.55.124 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="<nil>"
level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon
level=info msg="Detected devices" devices="[]" subsys=linux-datapath
level=info msg="Enabling k8s event listener" subsys=k8s-watcher
level=info msg="Removing stale endpoint interfaces" subsys=daemon
level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher
level=info msg="Skipping kvstore configuration" subsys=daemon
level=info msg="Initializing node addressing" subsys=daemon
level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="<nil>"
level=info msg="Restoring endpoints..." subsys=daemon
level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon
level=info msg="Addressing information:" subsys=daemon
level=info msg="  Cluster-Name: default" subsys=daemon
level=info msg="  Cluster-ID: 0" subsys=daemon
level=info msg="  Local node-name: instance" subsys=daemon
level=info msg="  Node-IPv6: <nil>" subsys=daemon
level=info msg="  External-Node IPv4: 162.253.55.124" subsys=daemon
level=info msg="  Internal-Node IPv4: 10.0.0.162" subsys=daemon
level=info msg="  IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon
level=info msg="  Loopback IPv4: 169.254.42.1" subsys=daemon
level=info msg="  Local IPv4 addresses:" subsys=daemon
level=info msg="  - 162.253.55.124" subsys=daemon
level=info msg="  - 172.17.0.100" subsys=daemon
level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.124} {CiliumInternalIP 10.0.0.162}] 10.0.0.0/24 [] <nil> [] 10.0.0.185 <nil> <nil> <nil> 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery
level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher
level=info msg="Initializing identity allocator" subsys=identity-cache
level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0
level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="<nil>" subsys=datapath-loader
level=info msg="Iptables rules installed" subsys=iptables
level=info msg="Adding new proxy port rules for cilium-dns-egress:40019" id=cilium-dns-egress subsys=proxy
level=info msg="Iptables proxy rules installed" subsys=iptables
level=info msg="Start hook executed" duration=2.49600615s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive
level=info msg="Starting IP identity watcher" subsys=ipcache
level=info msg="Initializing daemon" subsys=daemon
level=info msg="Validating configured node address ranges" subsys=daemon
level=info msg="Start hook executed" duration="137.315µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive
level=info msg="Start hook executed" duration="10.8µs" function="*job.group.Start" subsys=hive
level=info msg="Start hook executed" duration="55.033µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive
level=info msg="Start hook executed" duration="3.68µs" function="*job.group.Start" subsys=hive
level=info msg="Starting connection tracking garbage collector" subsys=daemon
level=info msg="Initial scan of connection tracking completed" subsys=ct-gc
level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon
level=info msg="Creating host endpoint" subsys=daemon
level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0
level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service
level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint
level=info msg="Launching Cilium health daemon" subsys=daemon
level=info msg="Launching Cilium health endpoint" subsys=daemon
level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon
level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon
level=info msg="processing 0 queued deletion requests" subsys=daemon
level=info msg="Initializing Cilium API" subsys=daemon
level=info msg="Daemon initialization completed" bootstrapTime=3.624738517s subsys=daemon
level=info msg="Hubble server is disabled" subsys=hubble
level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon
level=info msg="Compiled new BPF template" BPFCompilationTime=371.874625ms file-path=/var/run/cilium/state/templates/d84df4f42f3426c4a9ea8d60146744617cdc54dfe0f629f9d3f95ae923c84ffe/bpf_host.o subsys=datapath-loader
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3757 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3328 ipv4=10.0.0.185 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3328 identityLabels="reserved:health" ipv4=10.0.0.185 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3328 identity=4 identityLabels="reserved:health" ipv4=10.0.0.185 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.94 de7b95bc-ad86-4132-852c-b86d71e2a905 default   }" containerID=44a6717a15037a270f930b640301ab5d583bae9cf8bbbd78483a33ee70989714 datapathConfiguration="&{false false false false false <nil>}" interface=lxca04fa204ae5a k8sPodName=kube-system/coredns-7c96b6546b-9gkgg labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=44a6717a15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9gkgg subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=44a6717a15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9gkgg subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=44a6717a15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identity=10750 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9gkgg oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Waiting for endpoint to be generated" containerID=44a6717a15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identity=10750 ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9gkgg subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.40 24aa52af-bd99-4a1e-9a64-c8a5cdf2cd50 default   }" containerID=9a2dbc324ea81b688bd9bd5cb0e7d1399d4d10901c039617394281dcf7491ebd datapathConfiguration="&{false false false false false <nil>}" interface=lxc9133f50b4535 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-swwj4 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=9a2dbc324e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=284 ipv4=10.0.0.40 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-swwj4 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=9a2dbc324e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=284 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=22796e30-2610-4ccb-b05a-69e1b4c69ece,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=22796e30-2610-4ccb-b05a-69e1b4c69ece,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.40 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-swwj4 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=22796e30-2610-4ccb-b05a-69e1b4c69ece;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=22796e30-2610-4ccb-b05a-69e1b4c69ece;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=9a2dbc324e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=284 identity=19286 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=22796e30-2610-4ccb-b05a-69e1b4c69ece,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=22796e30-2610-4ccb-b05a-69e1b4c69ece,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.40 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-swwj4 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=9a2dbc324e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=284 identity=19286 ipv4=10.0.0.40 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-swwj4 subsys=endpoint
level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Compiled new BPF template" BPFCompilationTime=1.123671263s file-path=/var/run/cilium/state/templates/b8928faead7488c5b6d7f227bc5c5e035ff88db2b9c2df2804784571d17d53b2/bpf_lxc.o subsys=datapath-loader
level=info msg="Rewrote endpoint BPF program" containerID=44a6717a15 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3677 identity=10750 ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9gkgg subsys=endpoint
level=info msg="Successful endpoint creation" containerID=44a6717a15 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3677 identity=10750 ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9gkgg subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3328 identity=4 ipv4=10.0.0.185 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=9a2dbc324e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=284 identity=19286 ipv4=10.0.0.40 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-swwj4 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=9a2dbc324e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=284 identity=19286 ipv4=10.0.0.40 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-swwj4 subsys=daemon
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=9a2dbc324e endpointID=284 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-swwj4 subsys=daemon
level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=22796e30-2610-4ccb-b05a-69e1b4c69ece k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=22796e30-2610-4ccb-b05a-69e1b4c69ece k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator
level=info msg="Removed endpoint" containerID=9a2dbc324e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=284 identity=19286 ipv4=10.0.0.40 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-swwj4 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.235 50f60a0a-4c91-4de1-b2e8-d0bfc9c154c4 default   }" containerID=20c218f549fbd04ae8885d863f63b703e30c94552abfdb51b1bce0cc22324e40 datapathConfiguration="&{false false false false false <nil>}" interface=lxc607f224b2f8c k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7lbsn labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=20c218f549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 ipv4=10.0.0.235 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7lbsn subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=20c218f549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.235 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7lbsn subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=20c218f549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.235 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7lbsn line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=20c218f549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identity=25103 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.235 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7lbsn oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=20c218f549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identity=25103 ipv4=10.0.0.235 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7lbsn subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=20c218f549 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1994 identity=25103 ipv4=10.0.0.235 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7lbsn subsys=endpoint
level=info msg="Successful endpoint creation" containerID=20c218f549 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1994 identity=25103 ipv4=10.0.0.235 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7lbsn subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3757 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03757 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03757 subsys=bpf
level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03757 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03757:pending" subsys=bpf
level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf
level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3757 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.90 0f533068-60d4-4caa-8a71-89e2ba6e0492 default   }" containerID=d3299de7be8a1474f1d7e2f1cd6dab87f4c3ce972dcf9b339b961a0bd64d8089 datapathConfiguration="&{false false false false false <nil>}" interface=lxcbdc6cab14e88 k8sPodName=kube-system/coredns-67659f764b-r6k2h labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=d3299de7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 ipv4=10.0.0.90 ipv6= k8sPodName=kube-system/coredns-67659f764b-r6k2h subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=d3299de7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.90 ipv6= k8sPodName=kube-system/coredns-67659f764b-r6k2h subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=d3299de7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=10750 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.90 ipv6= k8sPodName=kube-system/coredns-67659f764b-r6k2h oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=d3299de7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=10750 ipv4=10.0.0.90 ipv6= k8sPodName=kube-system/coredns-67659f764b-r6k2h subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.156 4633b26a-168c-4342-ac4e-58c20c82c645 default   }" containerID=efcf569355930dfbd1a75b7af90b7a2fdf9258f9b8e6f333047ec9e8cbd8fcc8 datapathConfiguration="&{false false false false false <nil>}" interface=lxc0c4e18de61d9 k8sPodName=kube-system/coredns-67659f764b-l6rl2 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=efcf569355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-l6rl2 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=efcf569355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-l6rl2 subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=efcf569355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 identity=10750 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-l6rl2 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=efcf569355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 identity=10750 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-l6rl2 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=efcf569355 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2348 identity=10750 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-l6rl2 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=efcf569355 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2348 identity=10750 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-l6rl2 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=d3299de7be datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1915 identity=10750 ipv4=10.0.0.90 ipv6= k8sPodName=kube-system/coredns-67659f764b-r6k2h subsys=endpoint
level=info msg="Successful endpoint creation" containerID=d3299de7be datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1915 identity=10750 ipv4=10.0.0.90 ipv6= k8sPodName=kube-system/coredns-67659f764b-r6k2h subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.140 19724807-a89b-4019-a23d-1e7f2b869049 default   }" containerID=d2c2bad418dea3e6f69f1d3c5699700d4663821394cd05082ad00a52d05accdf datapathConfiguration="&{false false false false false <nil>}" interface=lxc13ca5829b285 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tbhmq labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=d2c2bad418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tbhmq subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=d2c2bad418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tbhmq subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=d2c2bad418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 identity=15523 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tbhmq oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=d2c2bad418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 identity=15523 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tbhmq subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=d2c2bad418 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2580 identity=15523 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tbhmq subsys=endpoint
level=info msg="Successful endpoint creation" containerID=d2c2bad418 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2580 identity=15523 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tbhmq subsys=daemon
level=info msg="Delete endpoint request" containerID=44a6717a15 endpointID=3677 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-9gkgg subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator
level=info msg="Removed endpoint" containerID=44a6717a15 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3677 identity=10750 ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9gkgg subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.123 c2b4193c-811b-41f0-b93e-19af03af1dd9 default   }" containerID=90996c347240062944f68f21cd56e10239691b14c8127b34580328f2f7b2c16d datapathConfiguration="&{false false false false false <nil>}" interface=lxc3d755951be6a k8sPodName=cert-manager/cert-manager-75c4c745bc-gv58s labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=90996c3472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gv58s subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=90996c3472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gv58s subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=90996c3472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=17110 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gv58s oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=90996c3472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=17110 ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gv58s subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.147 d30e60c1-67a1-4a73-83cb-a4b9eb21c70b default   }" containerID=e741e25ef1d7acefbb2781558512f424cee891737a0b3f54c5336e8b775ba941 datapathConfiguration="&{false false false false false <nil>}" interface=lxc4a0bcc9a995a k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f7w4x labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e741e25ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 ipv4=10.0.0.147 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f7w4x subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.226 cb139736-568a-4a74-856a-278b02c9ff64 default   }" containerID=a32daf279d053d4ae1bde8bebc459a053b7048e48c2a8da87d41132c53b0e7a8 datapathConfiguration="&{false false false false false <nil>}" interface=lxc99f93b6baf33 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bd6x8 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=a32daf279d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3857 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bd6x8 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e741e25ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.147 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f7w4x subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Resolving identity labels (blocking)" containerID=a32daf279d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3857 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bd6x8 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e741e25ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=29320 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.147 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f7w4x oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e741e25ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=29320 ipv4=10.0.0.147 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f7w4x subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=a32daf279d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3857 identity=5162 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bd6x8 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=a32daf279d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3857 identity=5162 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bd6x8 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=90996c3472 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=551 identity=17110 ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gv58s subsys=endpoint
level=info msg="Successful endpoint creation" containerID=90996c3472 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=551 identity=17110 ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gv58s subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=e741e25ef1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1152 identity=29320 ipv4=10.0.0.147 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f7w4x subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e741e25ef1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1152 identity=29320 ipv4=10.0.0.147 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-f7w4x subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=a32daf279d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3857 identity=5162 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bd6x8 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=a32daf279d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3857 identity=5162 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bd6x8 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.148 bae4d164-319a-4e42-b6ef-93a0bd588580 default   }" containerID=e0434117a828199ef532ebd66873b225353d22174c1650293d70ea492ac4a858 datapathConfiguration="&{false false false false false <nil>}" interface=lxc915e4aaf5934 k8sPodName=cert-manager/cert-manager-startupapicheck-qnxxb labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e0434117a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qnxxb subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e0434117a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=fbc8623c-6246-4433-9a26-8844c8fa14be,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=fbc8623c-6246-4433-9a26-8844c8fa14be,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qnxxb subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=fbc8623c-6246-4433-9a26-8844c8fa14be;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=fbc8623c-6246-4433-9a26-8844c8fa14be;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e0434117a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 identity=11018 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=fbc8623c-6246-4433-9a26-8844c8fa14be,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=fbc8623c-6246-4433-9a26-8844c8fa14be,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qnxxb oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e0434117a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 identity=11018 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qnxxb subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=e0434117a8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1901 identity=11018 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qnxxb subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e0434117a8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1901 identity=11018 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qnxxb subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=e0434117a8 endpointID=1901 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-qnxxb subsys=daemon
level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=fbc8623c-6246-4433-9a26-8844c8fa14be k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=fbc8623c-6246-4433-9a26-8844c8fa14be k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator
level=info msg="Removed endpoint" containerID=e0434117a8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1901 identity=11018 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qnxxb subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.190 b7b5e5ba-3ba6-40e6-b43f-9589abcc5b02 default   }" containerID=7278e5afac9910dd4c82a35ce03bc4133b97f52c6f3b6f11779a4b607f71adff datapathConfiguration="&{false false false false false <nil>}" interface=lxc8ca49b2498cc k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd2sx labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=7278e5afac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd2sx subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=7278e5afac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7c024404-6abd-4c86-b535-83f8966a01d0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=7c024404-6abd-4c86-b535-83f8966a01d0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd2sx subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=7c024404-6abd-4c86-b535-83f8966a01d0;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=7c024404-6abd-4c86-b535-83f8966a01d0;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=7278e5afac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identity=38573 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7c024404-6abd-4c86-b535-83f8966a01d0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=7c024404-6abd-4c86-b535-83f8966a01d0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd2sx oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=7278e5afac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identity=38573 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd2sx subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=7278e5afac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=558 identity=38573 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd2sx subsys=endpoint
level=info msg="Successful endpoint creation" containerID=7278e5afac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=558 identity=38573 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd2sx subsys=daemon
level=info msg="Delete endpoint request" containerID=7278e5afac endpointID=558 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-qd2sx subsys=daemon
level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=7c024404-6abd-4c86-b535-83f8966a01d0 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=7c024404-6abd-4c86-b535-83f8966a01d0 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator
level=info msg="Removed endpoint" containerID=7278e5afac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=558 identity=38573 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd2sx subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.172 3d620a41-ead4-476a-948a-9db47fc22413 default   }" containerID=45fc419dac0d4dcbd85c8af949852a83741209ff277e7e7f4b0bff4da227e31e datapathConfiguration="&{false false false false false <nil>}" interface=lxcd58085b6fa38 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ljqfs labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=45fc419dac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ljqfs subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=45fc419dac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=44f88cfc-185e-4572-9547-0772a7af9d20,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=44f88cfc-185e-4572-9547-0772a7af9d20,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ljqfs subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=45fc419dac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ljqfs line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=44f88cfc-185e-4572-9547-0772a7af9d20;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=44f88cfc-185e-4572-9547-0772a7af9d20;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=45fc419dac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identity=2088 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=44f88cfc-185e-4572-9547-0772a7af9d20,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=44f88cfc-185e-4572-9547-0772a7af9d20,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ljqfs oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=45fc419dac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identity=2088 ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ljqfs subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=45fc419dac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3253 identity=2088 ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ljqfs subsys=endpoint
level=info msg="Successful endpoint creation" containerID=45fc419dac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3253 identity=2088 ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ljqfs subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.53 89f5eefa-4df7-470f-afd7-d19444db2744 default   }" containerID=69a0ac0395639db62c6dfda4a1ec2aae5f65fc7ebdf4dff7b00b6f64c1c5dc6a datapathConfiguration="&{false false false false false <nil>}" interface=lxc4b9a89aa73d1 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2jqvq labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=69a0ac0395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4085 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2jqvq subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=69a0ac0395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4085 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2jqvq subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=69a0ac0395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4085 identity=23980 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2jqvq oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=69a0ac0395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4085 identity=23980 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2jqvq subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=69a0ac0395 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4085 identity=23980 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2jqvq subsys=endpoint
level=info msg="Successful endpoint creation" containerID=69a0ac0395 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4085 identity=23980 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2jqvq subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=45fc419dac endpointID=3253 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-ljqfs subsys=daemon
level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=44f88cfc-185e-4572-9547-0772a7af9d20 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=44f88cfc-185e-4572-9547-0772a7af9d20 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator
level=info msg="Removed endpoint" containerID=45fc419dac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3253 identity=2088 ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ljqfs subsys=endpoint
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=cbbce8f4-124e-4be1-b8d2-e99e985920a6] Description:}]" policyAddRequest=dd7240fe-f7c4-4bf4-98e2-b3a075d35df9 subsys=daemon
level=info msg="Policy imported via API, recalculating..." policyAddRequest=dd7240fe-f7c4-4bf4-98e2-b3a075d35df9 policyRevision=2 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>}] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6676cac2-d358-4a14-b665-0f67e5b3ce95] Description:}]" policyAddRequest=e9d0e694-0740-4a84-b722-d6050df85358 subsys=daemon
level=info msg="Policy imported via API, recalculating..." policyAddRequest=e9d0e694-0740-4a84-b722-d6050df85358 policyRevision=3 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher
level=info msg="Create endpoint request" addressing="&{10.0.0.218 216f437e-0ea7-4e64-8d1e-e73b659b7835 default   }" containerID=e8e9f298aa670c358433c4cba2bb3863ce4cbb8504644e1e8988ea810a2f6949 datapathConfiguration="&{false false false false false <nil>}" interface=lxcc6998bb65860 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ppsd8 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e8e9f298aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ppsd8 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e8e9f298aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ppsd8 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=e8e9f298aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ppsd8 line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e8e9f298aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identity=60624 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ppsd8 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e8e9f298aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identity=60624 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ppsd8 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.96 15a98339-7c6e-4b6d-8243-97baee0c0400 default   }" containerID=32699bf4fbcfea67ec31ce92f0861ec36b75fad3740b713542d4a9910d111587 datapathConfiguration="&{false false false false false <nil>}" interface=lxcf353cfb816f9 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pv88k labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=32699bf4fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pv88k subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=32699bf4fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pv88k subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=32699bf4fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identity=45043 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pv88k oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=32699bf4fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identity=45043 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pv88k subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=e8e9f298aa datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1006 identity=60624 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ppsd8 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e8e9f298aa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1006 identity=60624 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ppsd8 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=32699bf4fb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=400 identity=45043 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pv88k subsys=endpoint
level=info msg="Successful endpoint creation" containerID=32699bf4fb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=400 identity=45043 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pv88k subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.73 722de106-ae8e-41f8-8f8f-90c9e67d2bd6 default   }" containerID=71139c44e4a9557f17a35de2237ea3bbf289d320d47cc6df1a9bc180faa07aa5 datapathConfiguration="&{false false false false false <nil>}" interface=lxc761cff9f4c85 k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvl2v labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=71139c44e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvl2v subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=71139c44e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvl2v subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=71139c44e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.73 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvl2v line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=71139c44e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identity=13621 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvl2v oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=71139c44e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identity=13621 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvl2v subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=71139c44e4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1528 identity=13621 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvl2v subsys=endpoint
level=info msg="Successful endpoint creation" containerID=71139c44e4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1528 identity=13621 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jvl2v subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.57 800dff03-a7da-4db9-8d4d-12580c48a8cd default   }" containerID=38f3f0c5a34619d4a4b116c63a74c09481b601e2752b881cd52ca926ea53b64d datapathConfiguration="&{false false false false false <nil>}" interface=lxcfa6b2cfa5e29 k8sPodName=local-path-storage/helper-pod-create-pvc-477761aa-fcd1-41e6-9d20-469024f8c7ed labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=38f3f0c5a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2457 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-477761aa-fcd1-41e6-9d20-469024f8c7ed subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=38f3f0c5a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2457 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-477761aa-fcd1-41e6-9d20-469024f8c7ed subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=38f3f0c5a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2457 identity=10691 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-477761aa-fcd1-41e6-9d20-469024f8c7ed oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=38f3f0c5a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2457 identity=10691 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-477761aa-fcd1-41e6-9d20-469024f8c7ed subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=38f3f0c5a3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2457 identity=10691 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-477761aa-fcd1-41e6-9d20-469024f8c7ed subsys=endpoint
level=info msg="Successful endpoint creation" containerID=38f3f0c5a3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2457 identity=10691 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-477761aa-fcd1-41e6-9d20-469024f8c7ed subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.211 7a1fb4f4-84e0-4e42-9057-9d393593a5b0 default   }" containerID=9dfc24132332c2dc65c5b8256619d14a2bf0ec94dd4d6689fff18079c5af5025 datapathConfiguration="&{false false false false false <nil>}" interface=lxc6bf5f85b9873 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=9dfc241323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3070 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=9dfc241323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3070 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=9dfc241323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3070 identity=62807 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=9dfc241323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3070 identity=62807 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=9dfc241323 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3070 identity=62807 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=9dfc241323 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3070 identity=62807 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=38f3f0c5a3 endpointID=2457 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-477761aa-fcd1-41e6-9d20-469024f8c7ed subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=38f3f0c5a3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2457 identity=10691 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-477761aa-fcd1-41e6-9d20-469024f8c7ed subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.74 40a6e3ca-aefd-4300-9671-a07b206cb5cc default   }" containerID=f19cab4afad24f7d9ff51695b2c8fe2265748f12431fe37ee30abef7ebbb05c1 datapathConfiguration="&{false false false false false <nil>}" interface=lxc0e64eb8b28c4 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=f19cab4afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=f19cab4afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=f19cab4afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.74 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=f19cab4afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 identity=33709 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=f19cab4afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 identity=33709 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=f19cab4afa datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2815 identity=33709 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=f19cab4afa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2815 identity=33709 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.161 abb41d4d-f1e4-458c-837c-953ef59c1a6a default   }" containerID=a0cffbd7e0b7ef68b2e67c97cb03689ac2bc731863c8a51ebf88659a79ba6bab datapathConfiguration="&{false false false false false <nil>}" interface=lxc6a995ff38755 k8sPodName=openstack/memcached-memcached-6479589586-vdv5c labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=a0cffbd7e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vdv5c subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=a0cffbd7e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vdv5c subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=a0cffbd7e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identity=7640 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vdv5c oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=a0cffbd7e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identity=7640 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vdv5c subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=a0cffbd7e0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=125 identity=7640 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vdv5c subsys=endpoint
level=info msg="Successful endpoint creation" containerID=a0cffbd7e0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=125 identity=7640 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vdv5c subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>}] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=14c8a49e-c188-4b79-a861-82aec67c0549] Description:}]" policyAddRequest=28e9dd33-0f9e-4976-84ba-4188ec56939f subsys=daemon
level=info msg="Policy imported via API, recalculating..." policyAddRequest=28e9dd33-0f9e-4976-84ba-4188ec56939f policyRevision=4 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher
level=info msg="Create endpoint request" addressing="&{10.0.0.35 8d2404da-b154-4c49-b7c2-849c0e758c94 default   }" containerID=6282b6301f95ff77956b61274d7f9116e8940a924db3efc839d40312f2c6d23e datapathConfiguration="&{false false false false false <nil>}" interface=lxcda57ee1b65bb k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=6282b6301f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3812 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=6282b6301f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3812 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=6282b6301f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3812 identity=55002 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=6282b6301f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3812 identity=55002 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=6282b6301f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3812 identity=55002 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=6282b6301f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3812 identity=55002 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon
level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0344485244118047 newInterval=7m30s subsys=map-ct
level=info msg="Create endpoint request" addressing="&{10.0.0.155 808b5c3d-9770-4970-904d-d314c3d5cc52 default   }" containerID=a69574ca9c6da522e283f45334080291f7bd80503ee9fdd9d6c4788ee2cb972d datapathConfiguration="&{false false false false false <nil>}" interface=lxc4d43be2327a2 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lxmq labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=a69574ca9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2288 ipv4=10.0.0.155 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lxmq subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=a69574ca9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2288 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.155 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lxmq subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=a69574ca9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2288 identity=43187 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.155 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lxmq oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=a69574ca9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2288 identity=43187 ipv4=10.0.0.155 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lxmq subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=a69574ca9c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2288 identity=43187 ipv4=10.0.0.155 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lxmq subsys=endpoint
level=info msg="Successful endpoint creation" containerID=a69574ca9c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2288 identity=43187 ipv4=10.0.0.155 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lxmq subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.199 95ecdcc0-14e2-4d05-818b-0226c09488d2 default   }" containerID=9a85c05611f0112146c706d87ea93e906346f14641fc0ab66736ed822379ef8b datapathConfiguration="&{false false false false false <nil>}" interface=lxcd2684e57c58b k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkkzq labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=9a85c05611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4005 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkkzq subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=9a85c05611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4005 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=312a3d62-3b93-4b6a-bb33-b9796bcd1703,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=312a3d62-3b93-4b6a-bb33-b9796bcd1703,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkkzq subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=9a85c05611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4005 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkkzq line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=312a3d62-3b93-4b6a-bb33-b9796bcd1703;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=312a3d62-3b93-4b6a-bb33-b9796bcd1703;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=9a85c05611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4005 identity=10224 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=312a3d62-3b93-4b6a-bb33-b9796bcd1703,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=312a3d62-3b93-4b6a-bb33-b9796bcd1703,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkkzq oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=9a85c05611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4005 identity=10224 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkkzq subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=9a85c05611 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4005 identity=10224 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkkzq subsys=endpoint
level=info msg="Successful endpoint creation" containerID=9a85c05611 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4005 identity=10224 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkkzq subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=9a85c05611 endpointID=4005 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-zkkzq subsys=daemon
level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=312a3d62-3b93-4b6a-bb33-b9796bcd1703 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=312a3d62-3b93-4b6a-bb33-b9796bcd1703 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator
level=info msg="Removed endpoint" containerID=9a85c05611 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4005 identity=10224 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkkzq subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.194 b16f3923-bb88-4328-a52a-baf4d3a35528 default   }" containerID=7b8440bd5d1e02b835ef8cf91ec32f5710cded4f42dc6d2d7ac521eb87194b09 datapathConfiguration="&{false false false false false <nil>}" interface=lxc1180979c1a17 k8sPodName=monitoring/kube-prometheus-stack-grafana-7d5d5d8cdd-t6qmc labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=7b8440bd5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d5d5d8cdd-t6qmc subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=7b8440bd5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d5d5d8cdd-t6qmc subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=7b8440bd5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d5d5d8cdd-t6qmc line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=7b8440bd5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identity=2534 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d5d5d8cdd-t6qmc oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=7b8440bd5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identity=2534 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d5d5d8cdd-t6qmc subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=7b8440bd5d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=93 identity=2534 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d5d5d8cdd-t6qmc subsys=endpoint
level=info msg="Successful endpoint creation" containerID=7b8440bd5d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=93 identity=2534 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d5d5d8cdd-t6qmc subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.33 2accb39b-200b-43b9-9ae9-48065bd9341a default   }" containerID=abdeac869add7e0259a2bc0a650d7fe71bb8eeceeaa7fa3f7132349ca6d9ba08 datapathConfiguration="&{false false false false false <nil>}" interface=lxc682bc88eec4d k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sw8wk labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=abdeac869a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sw8wk subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=abdeac869a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sw8wk subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=abdeac869a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 identity=10112 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sw8wk oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=abdeac869a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 identity=10112 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sw8wk subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.239 451150e6-c976-4337-8577-fde35e3e39eb default   }" containerID=b7c42238bf412ebd9ec0249d4c1b65a58b6ee22e603225c62359d7e4fc6255c0 datapathConfiguration="&{false false false false false <nil>}" interface=lxcbec4ae6d6bcc k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55cjm labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=b7c42238bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55cjm subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=b7c42238bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55cjm subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=b7c42238bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=27411 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55cjm oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=b7c42238bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=27411 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55cjm subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=abdeac869a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=591 identity=10112 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sw8wk subsys=endpoint
level=info msg="Successful endpoint creation" containerID=abdeac869a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=591 identity=10112 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sw8wk subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=b7c42238bf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=272 identity=27411 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55cjm subsys=endpoint
level=info msg="Successful endpoint creation" containerID=b7c42238bf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=272 identity=27411 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55cjm subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.125 b82a4a97-8789-4d60-b7af-e12750d25906 default   }" containerID=1f3364c866eec735a15f3de4c837ca8f3fa4e38bf826a618396c04df44c06241 datapathConfiguration="&{false false false false false <nil>}" interface=lxc8a792fe41987 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kdp2k labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=1f3364c866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kdp2k subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=1f3364c866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=70818570-c79a-40c3-9de1-3a2ed729eacd,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=70818570-c79a-40c3-9de1-3a2ed729eacd,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kdp2k subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=70818570-c79a-40c3-9de1-3a2ed729eacd;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=70818570-c79a-40c3-9de1-3a2ed729eacd;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=1f3364c866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 identity=50253 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=70818570-c79a-40c3-9de1-3a2ed729eacd,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=70818570-c79a-40c3-9de1-3a2ed729eacd,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kdp2k oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=1f3364c866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 identity=50253 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kdp2k subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=1f3364c866 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3420 identity=50253 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kdp2k subsys=endpoint
level=info msg="Successful endpoint creation" containerID=1f3364c866 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3420 identity=50253 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kdp2k subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=1f3364c866 endpointID=3420 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-kdp2k subsys=daemon
level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=70818570-c79a-40c3-9de1-3a2ed729eacd k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=70818570-c79a-40c3-9de1-3a2ed729eacd k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator
level=info msg="Removed endpoint" containerID=1f3364c866 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3420 identity=50253 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kdp2k subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.69 a66cc78c-ec65-46c3-ad8a-565372e8491d default   }" containerID=5297535b20d59dc379e5159479fe48b2c1df6dbcc6639082dba6c6516f8de1ed datapathConfiguration="&{false false false false false <nil>}" interface=lxc4ff90f428cdd k8sPodName=local-path-storage/helper-pod-create-pvc-4e496cc0-e793-4d66-af78-253f4ffe683a labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=5297535b20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2533 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e496cc0-e793-4d66-af78-253f4ffe683a subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=5297535b20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2533 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e496cc0-e793-4d66-af78-253f4ffe683a subsys=endpoint
level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=5297535b20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2533 identity=10691 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e496cc0-e793-4d66-af78-253f4ffe683a oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=5297535b20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2533 identity=10691 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e496cc0-e793-4d66-af78-253f4ffe683a subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=5297535b20 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2533 identity=10691 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e496cc0-e793-4d66-af78-253f4ffe683a subsys=endpoint
level=info msg="Successful endpoint creation" containerID=5297535b20 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2533 identity=10691 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e496cc0-e793-4d66-af78-253f4ffe683a subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.11 8c91bd8b-6173-4974-920a-b04a6dc986e9 default   }" containerID=ec31a912e16cdfcbe1777071757682dda755c86d09973d88c17d02fe48744196 datapathConfiguration="&{false false false false false <nil>}" interface=lxc7bdceea59a30 k8sPodName=local-path-storage/helper-pod-create-pvc-841f4c5d-ca1f-4017-8ddf-46871b31b429 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=ec31a912e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1287 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-841f4c5d-ca1f-4017-8ddf-46871b31b429 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=ec31a912e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1287 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-841f4c5d-ca1f-4017-8ddf-46871b31b429 subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=ec31a912e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1287 identity=10691 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-841f4c5d-ca1f-4017-8ddf-46871b31b429 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=ec31a912e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1287 identity=10691 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-841f4c5d-ca1f-4017-8ddf-46871b31b429 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=ec31a912e1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1287 identity=10691 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-841f4c5d-ca1f-4017-8ddf-46871b31b429 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=ec31a912e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1287 identity=10691 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-841f4c5d-ca1f-4017-8ddf-46871b31b429 subsys=daemon
level=info msg="Delete endpoint request" containerID=ec31a912e1 endpointID=1287 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-841f4c5d-ca1f-4017-8ddf-46871b31b429 subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Delete endpoint request" containerID=5297535b20 endpointID=2533 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4e496cc0-e793-4d66-af78-253f4ffe683a subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=ec31a912e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1287 identity=10691 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-841f4c5d-ca1f-4017-8ddf-46871b31b429 subsys=endpoint
level=info msg="Removed endpoint" containerID=5297535b20 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2533 identity=10691 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e496cc0-e793-4d66-af78-253f4ffe683a subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.118 5e686a46-3705-4cdf-bb40-289147e00636 default   }" containerID=52e29eeecb09fa40ea81db9a7af94465903dd0032a5825cd7d8a679b30aa5986 datapathConfiguration="&{false false false false false <nil>}" interface=lxcda1cad49b9df k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=52e29eeecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=52e29eeecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=52e29eeecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identity=11917 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=52e29eeecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identity=11917 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=52e29eeecb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1334 identity=11917 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=52e29eeecb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1334 identity=11917 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.122 3293e1d7-d93a-4818-9b22-85c90fc5d393 default   }" containerID=e1a39dfd5c9a15eb8d0801246cb3d4ddcb19143c2e4060c40d5402e4b2209262 datapathConfiguration="&{false false false false false <nil>}" interface=lxc8d1959368264 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e1a39dfd5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e1a39dfd5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e1a39dfd5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 identity=15641 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e1a39dfd5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 identity=15641 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=e1a39dfd5c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1850 identity=15641 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e1a39dfd5c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1850 identity=15641 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.63 f81f0a64-34b8-4724-b7d3-efc60db60823 default   }" containerID=6720765044140f1f78b5a6ed5922d7133996cc15bb03aa5b61f9142c71425e0f datapathConfiguration="&{false false false false false <nil>}" interface=lxcbd3c57e2cd35 k8sPodName=local-path-storage/helper-pod-create-pvc-9c639061-a5b5-4d91-932d-99c2dae7d4bf labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=6720765044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c639061-a5b5-4d91-932d-99c2dae7d4bf subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=6720765044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c639061-a5b5-4d91-932d-99c2dae7d4bf subsys=endpoint
level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=6720765044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identity=10691 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c639061-a5b5-4d91-932d-99c2dae7d4bf oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=6720765044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identity=10691 ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c639061-a5b5-4d91-932d-99c2dae7d4bf subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=6720765044 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=368 identity=10691 ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c639061-a5b5-4d91-932d-99c2dae7d4bf subsys=endpoint
level=info msg="Successful endpoint creation" containerID=6720765044 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=368 identity=10691 ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c639061-a5b5-4d91-932d-99c2dae7d4bf subsys=daemon
level=info msg="Delete endpoint request" containerID=6720765044 endpointID=368 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9c639061-a5b5-4d91-932d-99c2dae7d4bf subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=6720765044 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=368 identity=10691 ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c639061-a5b5-4d91-932d-99c2dae7d4bf subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.209 d7b1cf72-ee00-47b1-b1a9-2364525ede5f default   }" containerID=1e3af8d7523012d6c3744a05ee10940c5db0bf23fd3595543d6107c952c84da7 datapathConfiguration="&{false false false false false <nil>}" interface=lxc158b3a2fe7be k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=1e3af8d752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=1e3af8d752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=1e3af8d752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 identity=26982 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=1e3af8d752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 identity=26982 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=1e3af8d752 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3540 identity=26982 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=1e3af8d752 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3540 identity=26982 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.76 d0069d84-7a70-4d8b-a363-26ad7d657a05 default   }" containerID=032a8006fe3cc0ede40f02186a8ab20c4ca466dd4c98921f688211f8e5ddc92a datapathConfiguration="&{false false false false false <nil>}" interface=lxcd11f43959ec7 k8sPodName=openstack/keystone-api-747f546c4c-x79mf labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=032a8006fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3395 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-api-747f546c4c-x79mf subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=032a8006fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3395 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-api-747f546c4c-x79mf subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=032a8006fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3395 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-api-747f546c4c-x79mf line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=032a8006fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3395 identity=19581 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-api-747f546c4c-x79mf oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=032a8006fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3395 identity=19581 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-api-747f546c4c-x79mf subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.153 a9314bbd-0fae-4250-b91f-4a4d35abf2c8 default   }" containerID=d48e44bc68c86d2f0fe41cdde24e760ddda3add5b83d3a07c313c70e9e655aef datapathConfiguration="&{false false false false false <nil>}" interface=lxc2774315aa05b k8sPodName=openstack/keystone-credential-setup-frvnb labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=d48e44bc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=799 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-credential-setup-frvnb subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=d48e44bc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=799 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7014a075-6a42-4df6-88da-8bf92b838f2b,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=7014a075-6a42-4df6-88da-8bf92b838f2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-credential-setup-frvnb subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7014a075-6a42-4df6-88da-8bf92b838f2b;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=7014a075-6a42-4df6-88da-8bf92b838f2b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=d48e44bc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=799 identity=41773 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7014a075-6a42-4df6-88da-8bf92b838f2b,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=7014a075-6a42-4df6-88da-8bf92b838f2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-credential-setup-frvnb oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=d48e44bc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=799 identity=41773 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-credential-setup-frvnb subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=032a8006fe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3395 identity=19581 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-api-747f546c4c-x79mf subsys=endpoint
level=info msg="Successful endpoint creation" containerID=032a8006fe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3395 identity=19581 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-api-747f546c4c-x79mf subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=d48e44bc68 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=799 identity=41773 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-credential-setup-frvnb subsys=endpoint
level=info msg="Successful endpoint creation" containerID=d48e44bc68 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=799 identity=41773 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-credential-setup-frvnb subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=d48e44bc68 endpointID=799 k8sNamespace=openstack k8sPodName=keystone-credential-setup-frvnb subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7014a075-6a42-4df6-88da-8bf92b838f2b k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=7014a075-6a42-4df6-88da-8bf92b838f2b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=d48e44bc68 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=799 identity=41773 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-credential-setup-frvnb subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.36 48bdb4b3-c64b-4060-9ae3-f8ab8995922f default   }" containerID=506c5cb03c3b8d0f46bb2df3dadbf0b0bf7026f2ff2ac97342ec5534718a7f10 datapathConfiguration="&{false false false false false <nil>}" interface=lxce902b9576da4 k8sPodName=openstack/keystone-db-init-mhz8v labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=506c5cb03c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/keystone-db-init-mhz8v subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=506c5cb03c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5a8529e4-d81d-4bb1-9c5b-bcd170694c4e,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=5a8529e4-d81d-4bb1-9c5b-bcd170694c4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/keystone-db-init-mhz8v subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=506c5cb03c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.36 ipv6= k8sPodName=openstack/keystone-db-init-mhz8v line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5a8529e4-d81d-4bb1-9c5b-bcd170694c4e;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=5a8529e4-d81d-4bb1-9c5b-bcd170694c4e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=506c5cb03c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=16941 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5a8529e4-d81d-4bb1-9c5b-bcd170694c4e,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=5a8529e4-d81d-4bb1-9c5b-bcd170694c4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/keystone-db-init-mhz8v oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=506c5cb03c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=16941 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/keystone-db-init-mhz8v subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=506c5cb03c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=151 identity=16941 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/keystone-db-init-mhz8v subsys=endpoint
level=info msg="Successful endpoint creation" containerID=506c5cb03c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=151 identity=16941 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/keystone-db-init-mhz8v subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=506c5cb03c endpointID=151 k8sNamespace=openstack k8sPodName=keystone-db-init-mhz8v subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5a8529e4-d81d-4bb1-9c5b-bcd170694c4e k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=5a8529e4-d81d-4bb1-9c5b-bcd170694c4e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=506c5cb03c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=151 identity=16941 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/keystone-db-init-mhz8v subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.238 2d21200a-6a89-4667-bc2f-9d6e0106e629 default   }" containerID=8338172691858255815d573662ef32e1fa8953c1cfebd513ec502297adac2b36 datapathConfiguration="&{false false false false false <nil>}" interface=lxcc28bf5a9376a k8sPodName=openstack/keystone-fernet-setup-z8l8n labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=8338172691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-z8l8n subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=8338172691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c18f9875-50ce-4194-9b62-fdd5c7ed0d29,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=c18f9875-50ce-4194-9b62-fdd5c7ed0d29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-z8l8n subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=8338172691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-z8l8n line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c18f9875-50ce-4194-9b62-fdd5c7ed0d29;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=c18f9875-50ce-4194-9b62-fdd5c7ed0d29;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=8338172691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identity=2668 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c18f9875-50ce-4194-9b62-fdd5c7ed0d29,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=c18f9875-50ce-4194-9b62-fdd5c7ed0d29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-z8l8n oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=8338172691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identity=2668 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-z8l8n subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=8338172691 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=20 identity=2668 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-z8l8n subsys=endpoint
level=info msg="Successful endpoint creation" containerID=8338172691 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=20 identity=2668 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-z8l8n subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=8338172691 endpointID=20 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-z8l8n subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c18f9875-50ce-4194-9b62-fdd5c7ed0d29 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=c18f9875-50ce-4194-9b62-fdd5c7ed0d29 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=8338172691 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=20 identity=2668 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-z8l8n subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.182 2f88ac18-90c9-489e-93c1-9c66794f57b2 default   }" containerID=3d7b0f01c9abf91f4a8eb3676d95b7ac60c3c613610ab090f0e989422b82ad98 datapathConfiguration="&{false false false false false <nil>}" interface=lxcc161ade383b6 k8sPodName=openstack/keystone-db-sync-cwx2f labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=3d7b0f01c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-db-sync-cwx2f subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=3d7b0f01c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7cde062f-0bd8-41e8-9ae9-b3b38c4c01fe,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=7cde062f-0bd8-41e8-9ae9-b3b38c4c01fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-db-sync-cwx2f subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7cde062f-0bd8-41e8-9ae9-b3b38c4c01fe;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=7cde062f-0bd8-41e8-9ae9-b3b38c4c01fe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=3d7b0f01c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 identity=56094 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7cde062f-0bd8-41e8-9ae9-b3b38c4c01fe,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=7cde062f-0bd8-41e8-9ae9-b3b38c4c01fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-db-sync-cwx2f oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Waiting for endpoint to be generated" containerID=3d7b0f01c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 identity=56094 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-db-sync-cwx2f subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=3d7b0f01c9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1668 identity=56094 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-db-sync-cwx2f subsys=endpoint
level=info msg="Successful endpoint creation" containerID=3d7b0f01c9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1668 identity=56094 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-db-sync-cwx2f subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=3d7b0f01c9 endpointID=1668 k8sNamespace=openstack k8sPodName=keystone-db-sync-cwx2f subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7cde062f-0bd8-41e8-9ae9-b3b38c4c01fe k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=7cde062f-0bd8-41e8-9ae9-b3b38c4c01fe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=3d7b0f01c9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1668 identity=56094 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-db-sync-cwx2f subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.230 b9e8d605-e148-4f4a-81ed-6b8694f1322f default   }" containerID=32b27f1bf97caaa0544e1aaa54e8bbcc7a8872562dc40250c5cb480920d1619c datapathConfiguration="&{false false false false false <nil>}" interface=lxc5bbe588a599f k8sPodName=openstack/keystone-rabbit-init-7vwvp labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=32b27f1bf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vwvp subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=32b27f1bf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5452b139-c1fa-4e38-bbcd-2f31587c9ea9,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5452b139-c1fa-4e38-bbcd-2f31587c9ea9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vwvp subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=32b27f1bf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vwvp line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5452b139-c1fa-4e38-bbcd-2f31587c9ea9;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5452b139-c1fa-4e38-bbcd-2f31587c9ea9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=32b27f1bf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=13619 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5452b139-c1fa-4e38-bbcd-2f31587c9ea9,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5452b139-c1fa-4e38-bbcd-2f31587c9ea9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vwvp oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=32b27f1bf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=13619 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vwvp subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=32b27f1bf9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=157 identity=13619 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vwvp subsys=endpoint
level=info msg="Successful endpoint creation" containerID=32b27f1bf9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=157 identity=13619 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vwvp subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=32b27f1bf9 endpointID=157 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-7vwvp subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5452b139-c1fa-4e38-bbcd-2f31587c9ea9 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5452b139-c1fa-4e38-bbcd-2f31587c9ea9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=32b27f1bf9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=157 identity=13619 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vwvp subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.238 811d8732-6e4f-4f85-bb43-7d932643ec64 default   }" containerID=87f65211974a29aac341918af3aebb7dffc0cf13b7edd4ab63993774edf4564f datapathConfiguration="&{false false false false false <nil>}" interface=lxca2de2dc584ad k8sPodName=openstack/keystone-domain-manage-2dsqq labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=87f6521197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=58 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-2dsqq subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=87f6521197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=58 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6b756c14-7747-434a-8027-fbbfef1862da,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=6b756c14-7747-434a-8027-fbbfef1862da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-2dsqq subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6b756c14-7747-434a-8027-fbbfef1862da;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=6b756c14-7747-434a-8027-fbbfef1862da;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=87f6521197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=58 identity=33952 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6b756c14-7747-434a-8027-fbbfef1862da,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=6b756c14-7747-434a-8027-fbbfef1862da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-2dsqq oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=87f6521197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=58 identity=33952 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-2dsqq subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=87f6521197 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=58 identity=33952 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-2dsqq subsys=endpoint
level=info msg="Successful endpoint creation" containerID=87f6521197 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=58 identity=33952 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-2dsqq subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=87f6521197 endpointID=58 k8sNamespace=openstack k8sPodName=keystone-domain-manage-2dsqq subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6b756c14-7747-434a-8027-fbbfef1862da k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=6b756c14-7747-434a-8027-fbbfef1862da k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=87f6521197 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=58 identity=33952 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-2dsqq subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.10 ed0e0189-44c2-481b-b34c-98f2e525c01f default   }" containerID=dc11e3f739ccd158a9273b703866e8c521b5ecca2f55bf6433a229d6f0444a0e datapathConfiguration="&{false false false false false <nil>}" interface=lxc275ab143c437 k8sPodName=openstack/keystone-bootstrap-2bwqr labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=dc11e3f739 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-2bwqr subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=dc11e3f739 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=24a74446-c12d-4972-8d4d-cf38dd7ad65e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=24a74446-c12d-4972-8d4d-cf38dd7ad65e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-2bwqr subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=24a74446-c12d-4972-8d4d-cf38dd7ad65e;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=24a74446-c12d-4972-8d4d-cf38dd7ad65e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator
level=info msg="Invalid state transition skipped" containerID=dc11e3f739 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-2bwqr line=611 subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=dc11e3f739 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 identity=37069 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=24a74446-c12d-4972-8d4d-cf38dd7ad65e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=24a74446-c12d-4972-8d4d-cf38dd7ad65e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-2bwqr oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=dc11e3f739 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 identity=37069 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-2bwqr subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=dc11e3f739 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1654 identity=37069 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-2bwqr subsys=endpoint
level=info msg="Successful endpoint creation" containerID=dc11e3f739 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1654 identity=37069 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-2bwqr subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=dc11e3f739 endpointID=1654 k8sNamespace=openstack k8sPodName=keystone-bootstrap-2bwqr subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=24a74446-c12d-4972-8d4d-cf38dd7ad65e k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=24a74446-c12d-4972-8d4d-cf38dd7ad65e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=dc11e3f739 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1654 identity=37069 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-2bwqr subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.254 f6be7a8a-8164-45c4-b789-3a037dd34a65 default   }" containerID=909273f74ceb564131c79dcb17b4d9ba3b9f89549bb0e52dfd889e8725e7b536 datapathConfiguration="&{false false false false false <nil>}" interface=lxc8f13d27c0eb8 k8sPodName=openstack/horizon-74594f477d-x5xkv labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=909273f74c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/horizon-74594f477d-x5xkv subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=909273f74c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/horizon-74594f477d-x5xkv subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=909273f74c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identity=11813 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/horizon-74594f477d-x5xkv oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=909273f74c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identity=11813 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/horizon-74594f477d-x5xkv subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=909273f74c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3590 identity=11813 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/horizon-74594f477d-x5xkv subsys=endpoint
level=info msg="Successful endpoint creation" containerID=909273f74c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3590 identity=11813 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/horizon-74594f477d-x5xkv subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.50 6f329e10-6a6f-45dc-92e8-a8c01385e9af default   }" containerID=518283b57e5a5ddb7e5c353fbe22020893051a47af3b1f0f1939126815d9be09 datapathConfiguration="&{false false false false false <nil>}" interface=lxcfeafccdf282a k8sPodName=openstack/horizon-74594f477d-jsbzf labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=518283b57e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/horizon-74594f477d-jsbzf subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=518283b57e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/horizon-74594f477d-jsbzf subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=518283b57e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identity=11813 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/horizon-74594f477d-jsbzf oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=518283b57e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identity=11813 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/horizon-74594f477d-jsbzf subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.119 f7dbaffc-4729-45d1-89f6-c01e6ba20bcf default   }" containerID=b5004ec12c5ec3b349a028340e3275c5ae251f0a926c5dfc04ed5fd2aec337d6 datapathConfiguration="&{false false false false false <nil>}" interface=lxcf043fbbbf96e k8sPodName=openstack/horizon-db-init-fbjls labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=b5004ec12c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/horizon-db-init-fbjls subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=b5004ec12c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=890d491e-76dc-4868-8480-a97e9f156c96,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=890d491e-76dc-4868-8480-a97e9f156c96,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/horizon-db-init-fbjls subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=890d491e-76dc-4868-8480-a97e9f156c96;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=890d491e-76dc-4868-8480-a97e9f156c96;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=b5004ec12c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 identity=30219 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=890d491e-76dc-4868-8480-a97e9f156c96,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=890d491e-76dc-4868-8480-a97e9f156c96,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/horizon-db-init-fbjls oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=b5004ec12c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 identity=30219 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/horizon-db-init-fbjls subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.3 747b4797-9d54-4174-b92b-df9e39c1ffb6 default   }" containerID=14b46681e2bb42770b8eb12ce0655a22d1b7a135cd5e5595904618ecc76136b1 datapathConfiguration="&{false false false false false <nil>}" interface=lxc29c0ff7d8b9d k8sPodName=openstack/horizon-74594f477d-jssc4 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=14b46681e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/horizon-74594f477d-jssc4 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=14b46681e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/horizon-74594f477d-jssc4 subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=14b46681e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=11813 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/horizon-74594f477d-jssc4 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=14b46681e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=11813 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/horizon-74594f477d-jssc4 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=b5004ec12c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3107 identity=30219 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/horizon-db-init-fbjls subsys=endpoint
level=info msg="Successful endpoint creation" containerID=b5004ec12c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3107 identity=30219 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/horizon-db-init-fbjls subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=518283b57e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2945 identity=11813 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/horizon-74594f477d-jsbzf subsys=endpoint
level=info msg="Successful endpoint creation" containerID=518283b57e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2945 identity=11813 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/horizon-74594f477d-jsbzf subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=14b46681e2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=572 identity=11813 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/horizon-74594f477d-jssc4 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=14b46681e2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=572 identity=11813 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/horizon-74594f477d-jssc4 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=b5004ec12c endpointID=3107 k8sNamespace=openstack k8sPodName=horizon-db-init-fbjls subsys=daemon
level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=890d491e-76dc-4868-8480-a97e9f156c96 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=890d491e-76dc-4868-8480-a97e9f156c96 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator
level=info msg="Removed endpoint" containerID=b5004ec12c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3107 identity=30219 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/horizon-db-init-fbjls subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.163 2afd4644-e725-4857-9004-c12ba9472646 default   }" containerID=887281c83be5c40d1d1ed676c08f047ddd4a55689ae1efdb0a1cd22874ded603 datapathConfiguration="&{false false false false false <nil>}" interface=lxc4f15a22a8c8e k8sPodName=openstack/horizon-db-sync-fx97s labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=887281c83b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-fx97s subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=887281c83b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=c292a8bd-05ed-4bd8-855f-9d3a21e1f270,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=c292a8bd-05ed-4bd8-855f-9d3a21e1f270,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-fx97s subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=c292a8bd-05ed-4bd8-855f-9d3a21e1f270;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=c292a8bd-05ed-4bd8-855f-9d3a21e1f270;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=887281c83b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=36263 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=c292a8bd-05ed-4bd8-855f-9d3a21e1f270,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=c292a8bd-05ed-4bd8-855f-9d3a21e1f270,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-fx97s oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=887281c83b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=36263 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-fx97s subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=887281c83b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1767 identity=36263 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-fx97s subsys=endpoint
level=info msg="Successful endpoint creation" containerID=887281c83b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1767 identity=36263 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-fx97s subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=887281c83b endpointID=1767 k8sNamespace=openstack k8sPodName=horizon-db-sync-fx97s subsys=daemon
level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=c292a8bd-05ed-4bd8-855f-9d3a21e1f270 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=c292a8bd-05ed-4bd8-855f-9d3a21e1f270 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator
level=info msg="Removed endpoint" containerID=887281c83b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1767 identity=36263 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-fx97s subsys=endpoint