level=info msg="Memory available for map entries (0.003% of 16764952576B): 41912381B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147060" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147060" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147060" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.585259ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="133.464µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.890089ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="25.901µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=158.098224ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.971µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.251µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="64.652µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="66.792µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="76.222µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="467.464µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.5µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.74914ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=12.646678ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="56.492µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="53.822µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="369.491µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="130.904µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="77.574µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=51.945395ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="170.255µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.01µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="4.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.189.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=106.521172ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.072618ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="10.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.800548ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.02µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.72µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.82µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="21.3µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.521µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="47.032µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="282.409µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.77µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="227.197µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="461.804µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.26459ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.42µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="15.511µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.189 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.189 ipAddr.ipv6="" k8sNodeIP=162.253.55.189 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.189" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.200" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.189" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.189} {CiliumInternalIP 10.0.0.200}] 10.0.0.0/24 [] [] 10.0.0.219 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39313" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.437673216s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="15.7µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.98µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="32.221µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.25µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.569270458s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=325.510628ms file-path=/var/run/cilium/state/templates/3d18b3009aa1397106f98edd688f18b625ff7ab257adb3c84725109f7d43e868/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1008 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 ipv4=10.0.0.219 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identityLabels="reserved:health" ipv4=10.0.0.219 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identity=4 identityLabels="reserved:health" ipv4=10.0.0.219 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Create endpoint request" addressing="&{10.0.0.16 caf727dd-47af-474a-b0b3-d9296a69c2b1 default }" containerID=0bdf671ff5a976797c7a7003bfa695801371a3be9fa490a1df4093c6267823d5 datapathConfiguration="&{false false false false false }" interface=lxcc60a1cdfd167 k8sPodName=kube-system/coredns-7c96b6546b-fzdvx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bdf671ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fzdvx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bdf671ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fzdvx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bdf671ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 identity=10355 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fzdvx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bdf671ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 identity=10355 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fzdvx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 955925e0-48bf-4585-b8a4-235964ad2205 default }" containerID=253dfab480569233da9eca4da1c2aaff62cae93cd3bb78a6a1c829994a8cbf7d datapathConfiguration="&{false false false false false }" interface=lxc58f0b0f14653 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gwrn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=253dfab480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 ipv4=10.0.0.248 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gwrn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=253dfab480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=040bc8fb-af57-4d23-89ed-cddb9e7fdd23,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=040bc8fb-af57-4d23-89ed-cddb9e7fdd23,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.248 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gwrn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=040bc8fb-af57-4d23-89ed-cddb9e7fdd23;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=040bc8fb-af57-4d23-89ed-cddb9e7fdd23;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=253dfab480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=12778 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=040bc8fb-af57-4d23-89ed-cddb9e7fdd23,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=040bc8fb-af57-4d23-89ed-cddb9e7fdd23,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.248 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gwrn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=253dfab480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=12778 ipv4=10.0.0.248 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gwrn5 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.139403301s file-path=/var/run/cilium/state/templates/b9da959feb853adb01f02824a7067322428459d8625819863159104df9fed3d8/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=253dfab480 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=481 identity=12778 ipv4=10.0.0.248 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gwrn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=253dfab480 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=481 identity=12778 ipv4=10.0.0.248 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gwrn5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1724 identity=4 ipv4=10.0.0.219 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0bdf671ff5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2516 identity=10355 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fzdvx subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bdf671ff5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2516 identity=10355 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fzdvx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=253dfab480 endpointID=481 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-gwrn5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=040bc8fb-af57-4d23-89ed-cddb9e7fdd23 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=040bc8fb-af57-4d23-89ed-cddb9e7fdd23 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=253dfab480 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=481 identity=12778 ipv4=10.0.0.248 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gwrn5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 83a7c969-580f-4f0e-ab0e-0ba875c88741 default }" containerID=5c4cedd52951a1f33940165dcf7b0206024ee3fb62c587d8e9d6f0808d55314e datapathConfiguration="&{false false false false false }" interface=lxcfd3c63f90abd k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-js86b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c4cedd529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 ipv4=10.0.0.123 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-js86b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c4cedd529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.123 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-js86b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5c4cedd529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=33964 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.123 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-js86b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c4cedd529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=33964 ipv4=10.0.0.123 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-js86b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c4cedd529 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=194 identity=33964 ipv4=10.0.0.123 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-js86b subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c4cedd529 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=194 identity=33964 ipv4=10.0.0.123 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-js86b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1008 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01008 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01008 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01008 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01008:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1008 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 e70a6279-7394-405a-ae14-36285b1064b0 default }" containerID=653472fdcfcb959a7b379cf14a2694992be5b09b8616b63bedbc56c1fc9dd822 datapathConfiguration="&{false false false false false }" interface=lxce8bb97623787 k8sPodName=kube-system/coredns-67659f764b-sr884 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=653472fdcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-67659f764b-sr884 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=653472fdcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-67659f764b-sr884 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=653472fdcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 identity=10355 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-67659f764b-sr884 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=653472fdcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 identity=10355 ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-67659f764b-sr884 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 7cdaf2cc-7b10-4f27-9cab-aee07ab05265 default }" containerID=4fe3a326d3a2cbb7d49393959d2d06234105a8e42a8bd415630ae6a341fded66 datapathConfiguration="&{false false false false false }" interface=lxca948f38dc9aa k8sPodName=kube-system/coredns-67659f764b-b4zdm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fe3a326d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3101 ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-67659f764b-b4zdm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fe3a326d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3101 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-67659f764b-b4zdm subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4fe3a326d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3101 identity=10355 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-67659f764b-b4zdm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fe3a326d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3101 identity=10355 ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-67659f764b-b4zdm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=653472fdcf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3343 identity=10355 ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-67659f764b-sr884 subsys=endpoint level=info msg="Successful endpoint creation" containerID=653472fdcf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3343 identity=10355 ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-67659f764b-sr884 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4fe3a326d3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3101 identity=10355 ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-67659f764b-b4zdm subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fe3a326d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3101 identity=10355 ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-67659f764b-b4zdm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.152 5d7074a9-7507-4d99-9ce8-f075fa415f39 default }" containerID=efbce0d7463cf1e77588be2da44b26dd777076966ef44a2213bccbd21578a03b datapathConfiguration="&{false false false false false }" interface=lxc8bbe37be8d2f k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtsl8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efbce0d746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtsl8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efbce0d746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtsl8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=efbce0d746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtsl8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efbce0d746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 identity=25664 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtsl8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=efbce0d746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 identity=25664 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtsl8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=efbce0d746 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3586 identity=25664 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtsl8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=efbce0d746 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3586 identity=25664 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtsl8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0bdf671ff5 endpointID=2516 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-fzdvx subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=0bdf671ff5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2516 identity=10355 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fzdvx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 3d587fe0-f69d-4589-8c3f-ed73864a60f8 default }" containerID=59f006332473dce8581d252c170cc5885f824ebc55537b366b3364cc2269a544 datapathConfiguration="&{false false false false false }" interface=lxcc9cf2ffcd20b k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-gx2kp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59f0063324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 ipv4=10.0.0.229 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-gx2kp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59f0063324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.229 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-gx2kp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59f0063324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=34962 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.229 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-gx2kp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59f0063324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=34962 ipv4=10.0.0.229 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-gx2kp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 7261dc0c-0f35-425c-ad37-a56ca53940b6 default }" containerID=5b11712a641cec9f23cf1904cd3953f3272be72c7d1f2920861d32d0c2f073ba datapathConfiguration="&{false false false false false }" interface=lxc66c7c128f334 k8sPodName=cert-manager/cert-manager-75969b45cf-7dhcx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b11712a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-7dhcx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b11712a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-7dhcx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b11712a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 identity=11175 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-7dhcx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b11712a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 identity=11175 ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-7dhcx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b11712a64 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3396 identity=11175 ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-7dhcx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b11712a64 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3396 identity=11175 ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-7dhcx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=59f0063324 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1095 identity=34962 ipv4=10.0.0.229 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-gx2kp subsys=endpoint level=info msg="Successful endpoint creation" containerID=59f0063324 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1095 identity=34962 ipv4=10.0.0.229 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-gx2kp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.26 731c1a62-eda4-47d5-aa56-cb4a323f1686 default }" containerID=f87664a6f604b1ea30319da852c34894300acdcb6b030d187ee43f8549ebf803 datapathConfiguration="&{false false false false false }" interface=lxca42c5e319410 k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-99w6j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f87664a6f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-99w6j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f87664a6f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-99w6j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f87664a6f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identity=5506 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-99w6j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f87664a6f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identity=5506 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-99w6j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f87664a6f6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1414 identity=5506 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-99w6j subsys=endpoint level=info msg="Successful endpoint creation" containerID=f87664a6f6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1414 identity=5506 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-99w6j subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.235 7f8a0e65-45dd-4b8c-b688-c6cf64358543 default }" containerID=25ac075054d6512e7e09338c0755e36bde33f4a8baf55effa19828ee9f88f23b datapathConfiguration="&{false false false false false }" interface=lxc4c13ae8560b0 k8sPodName=cert-manager/cert-manager-startupapicheck-877qd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25ac075054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-877qd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25ac075054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=18031852-dc2e-4644-bbfc-264634e5d296,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=18031852-dc2e-4644-bbfc-264634e5d296,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-877qd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=18031852-dc2e-4644-bbfc-264634e5d296;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=18031852-dc2e-4644-bbfc-264634e5d296;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25ac075054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 identity=1075 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=18031852-dc2e-4644-bbfc-264634e5d296,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=18031852-dc2e-4644-bbfc-264634e5d296,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-877qd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25ac075054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 identity=1075 ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-877qd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25ac075054 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=113 identity=1075 ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-877qd subsys=endpoint level=info msg="Successful endpoint creation" containerID=25ac075054 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=113 identity=1075 ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-877qd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=25ac075054 endpointID=113 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-877qd subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=18031852-dc2e-4644-bbfc-264634e5d296 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=18031852-dc2e-4644-bbfc-264634e5d296 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=25ac075054 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=113 identity=1075 ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-877qd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 b33df110-6ff1-434b-ae31-1a30d8d883b3 default }" containerID=438994883a9a371cde43ded6c0ab0e761ee7e98880ecd4aee88eaf6812b5d290 datapathConfiguration="&{false false false false false }" interface=lxcbb0b2aa90ee3 k8sPodName=ingress-nginx/ingress-nginx-admission-create-pp24x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=438994883a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 ipv4=10.0.0.173 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pp24x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=438994883a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1b41684f-d6bb-45c4-a17d-65e7aadfaadc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=1b41684f-d6bb-45c4-a17d-65e7aadfaadc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.173 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pp24x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=1b41684f-d6bb-45c4-a17d-65e7aadfaadc;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=1b41684f-d6bb-45c4-a17d-65e7aadfaadc;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=438994883a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identity=519 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1b41684f-d6bb-45c4-a17d-65e7aadfaadc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=1b41684f-d6bb-45c4-a17d-65e7aadfaadc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.173 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pp24x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=438994883a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identity=519 ipv4=10.0.0.173 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pp24x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=438994883a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=821 identity=519 ipv4=10.0.0.173 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pp24x subsys=endpoint level=info msg="Successful endpoint creation" containerID=438994883a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=821 identity=519 ipv4=10.0.0.173 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pp24x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=438994883a endpointID=821 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-pp24x subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=1b41684f-d6bb-45c4-a17d-65e7aadfaadc k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=1b41684f-d6bb-45c4-a17d-65e7aadfaadc k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=438994883a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=821 identity=519 ipv4=10.0.0.173 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pp24x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 9cd8efa5-c2be-4592-8ca2-0ce42c0a7172 default }" containerID=481e077d5c2df33e725cd0ee002feb4789211c9a6302bb3f0cbe78484cfe89db datapathConfiguration="&{false false false false false }" interface=lxc5f80ab88379f k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c7bcl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=481e077d5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c7bcl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=481e077d5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c7bcl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=481e077d5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c7bcl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=481e077d5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identity=28589 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c7bcl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=481e077d5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identity=28589 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c7bcl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=481e077d5c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=570 identity=28589 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c7bcl subsys=endpoint level=info msg="Successful endpoint creation" containerID=481e077d5c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=570 identity=28589 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c7bcl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.3 b935e2f2-fc3f-4f38-a5ed-f78662903def default }" containerID=4b1268c126ed14c4e003564fd8edce5644785c9f1079e114e01d4318218329c2 datapathConfiguration="&{false false false false false }" interface=lxc81fff2a3b265 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jnqsc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b1268c126 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 ipv4=10.0.0.3 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jnqsc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b1268c126 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=39cd5d4c-2a2c-4a02-8595-5215619fb7d2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=39cd5d4c-2a2c-4a02-8595-5215619fb7d2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.3 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jnqsc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=39cd5d4c-2a2c-4a02-8595-5215619fb7d2;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=39cd5d4c-2a2c-4a02-8595-5215619fb7d2;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b1268c126 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identity=30039 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=39cd5d4c-2a2c-4a02-8595-5215619fb7d2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=39cd5d4c-2a2c-4a02-8595-5215619fb7d2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.3 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jnqsc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b1268c126 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identity=30039 ipv4=10.0.0.3 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jnqsc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b1268c126 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1651 identity=30039 ipv4=10.0.0.3 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jnqsc subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b1268c126 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1651 identity=30039 ipv4=10.0.0.3 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jnqsc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4b1268c126 endpointID=1651 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-jnqsc subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=39cd5d4c-2a2c-4a02-8595-5215619fb7d2 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=39cd5d4c-2a2c-4a02-8595-5215619fb7d2 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=4b1268c126 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1651 identity=30039 ipv4=10.0.0.3 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jnqsc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 3925443e-2abc-4d67-a971-5d8c421b2ce9 default }" containerID=d2355dc6b4d3a474e39080447131130ac1b2c8ef786790794edbb704e99e7107 datapathConfiguration="&{false false false false false }" interface=lxc848074256bb7 k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-svml2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2355dc6b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3714 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-svml2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2355dc6b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3714 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-svml2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d2355dc6b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3714 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-svml2 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d2355dc6b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3714 identity=31045 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-svml2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2355dc6b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3714 identity=31045 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-svml2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2355dc6b4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3714 identity=31045 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-svml2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2355dc6b4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3714 identity=31045 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-svml2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.98 2a3c6455-35ec-4a18-b44b-08bba3da351e default }" containerID=7c2e3daba74579dc281cda8f53bfa252939cf15420c7bcfe3effffec73bec8bb datapathConfiguration="&{false false false false false }" interface=lxc1f1033784cf4 k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-767ck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c2e3daba7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3697 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-767ck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c2e3daba7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3697 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-767ck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c2e3daba7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3697 identity=8438 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-767ck oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c2e3daba7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3697 identity=8438 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-767ck subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c2e3daba7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3697 identity=8438 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-767ck subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c2e3daba7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3697 identity=8438 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-767ck subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.241 52d7b7a9-0786-4de7-8c03-bd802e571da0 default }" containerID=c57bf8f3c28b93a8669028aedceecb3e5e75be6fdf6ebe67904758408c493961 datapathConfiguration="&{false false false false false }" interface=lxc28c665528ee4 k8sPodName=openstack/pxc-operator-59d66cbc78-s6ssx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c57bf8f3c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-s6ssx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c57bf8f3c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-s6ssx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c57bf8f3c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-s6ssx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c57bf8f3c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=11822 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-s6ssx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c57bf8f3c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=11822 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-s6ssx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c57bf8f3c2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=281 identity=11822 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-s6ssx subsys=endpoint level=info msg="Successful endpoint creation" containerID=c57bf8f3c2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=281 identity=11822 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-s6ssx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.72 5c0e4beb-20dd-46a6-ba3a-f7c6b1e5919f default }" containerID=60c76b5afd254f6ce4e916eec94b67cc031dfd64e8452ed98a0e0428dca27023 datapathConfiguration="&{false false false false false }" interface=lxc8c7b6f0c3d01 k8sPodName=local-path-storage/helper-pod-create-pvc-a0d8f026-4701-4ec1-950a-756bbcd41096 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60c76b5afd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0d8f026-4701-4ec1-950a-756bbcd41096 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60c76b5afd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0d8f026-4701-4ec1-950a-756bbcd41096 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=60c76b5afd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0d8f026-4701-4ec1-950a-756bbcd41096 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=60c76b5afd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 identity=14790 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0d8f026-4701-4ec1-950a-756bbcd41096 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60c76b5afd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 identity=14790 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0d8f026-4701-4ec1-950a-756bbcd41096 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60c76b5afd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1138 identity=14790 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0d8f026-4701-4ec1-950a-756bbcd41096 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60c76b5afd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1138 identity=14790 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0d8f026-4701-4ec1-950a-756bbcd41096 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.144 2fcb27f9-cd45-45b2-9b13-d5c68c966bb0 default }" containerID=3af5fb73542f770943155ecd118116c7b5e90bb491f42d7e5da0755e5b7e10a4 datapathConfiguration="&{false false false false false }" interface=lxc832bfd92286e k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3af5fb7354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3af5fb7354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3af5fb7354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identity=26386 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3af5fb7354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identity=26386 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3af5fb7354 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=278 identity=26386 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3af5fb7354 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=278 identity=26386 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60c76b5afd endpointID=1138 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a0d8f026-4701-4ec1-950a-756bbcd41096 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=60c76b5afd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1138 identity=14790 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0d8f026-4701-4ec1-950a-756bbcd41096 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 21f32539-a9b5-4ff3-ac27-d1aa4cb3ccd6 default }" containerID=24ff07a9cd58dd5fb05088e9aefbed996f46e253660e09100b80fd88f827b5ba datapathConfiguration="&{false false false false false }" interface=lxc1596ba1f28f5 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24ff07a9cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24ff07a9cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24ff07a9cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identity=14673 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24ff07a9cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identity=14673 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=24ff07a9cd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1 identity=14673 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=24ff07a9cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1 identity=14673 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.225 433dda64-5426-4e3c-9098-633c1896bc16 default }" containerID=f997f396b9ee7c15000b2374b09b093b2bb2def53900e18a99745c1a5bd28e8a datapathConfiguration="&{false false false false false }" interface=lxc0e9a4e140b85 k8sPodName=openstack/memcached-memcached-c47d949f5-mxcl4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f997f396b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3273 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-mxcl4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f997f396b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3273 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-mxcl4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f997f396b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3273 identity=62308 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-mxcl4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f997f396b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3273 identity=62308 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-mxcl4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f997f396b9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3273 identity=62308 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-mxcl4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f997f396b9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3273 identity=62308 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-mxcl4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.238 3ce75ebe-932a-42e6-b6f0-d4f34260e4be default }" containerID=ad806d166557293232efae3f1712fea1c37ed45f30aa805413a5b02bbb9a4c5c datapathConfiguration="&{false false false false false }" interface=lxc3b1db588ba8e k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad806d1665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 ipv4=10.0.0.238 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad806d1665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.238 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ad806d1665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.238 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad806d1665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=16319 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.238 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad806d1665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=16319 ipv4=10.0.0.238 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad806d1665 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=348 identity=16319 ipv4=10.0.0.238 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad806d1665 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=348 identity=16319 ipv4=10.0.0.238 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.206 08b509d3-192e-4e37-9de6-53684cf811e0 default }" containerID=b3295f86f2b6336fbc27a355ba3b1ea357f8c0792c96dfc0d6870a4043c99500 datapathConfiguration="&{false false false false false }" interface=lxc2052c61668d6 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5bxks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3295f86f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 ipv4=10.0.0.206 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5bxks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3295f86f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.206 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5bxks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b3295f86f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 identity=36405 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.206 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5bxks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3295f86f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 identity=36405 ipv4=10.0.0.206 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5bxks subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3295f86f2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1376 identity=36405 ipv4=10.0.0.206 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5bxks subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3295f86f2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1376 identity=36405 ipv4=10.0.0.206 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5bxks subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.043478852169182645 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.38 3d416012-fdce-4d79-8f10-e107984cc8ef default }" containerID=22163f61e57dc1bce809e2b2c1112df62a6aebc95ae28e7063f6e6888b4bf385 datapathConfiguration="&{false false false false false }" interface=lxc8d62bae2060e k8sPodName=monitoring/kube-prometheus-stack-admission-create-gx4r6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22163f61e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gx4r6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22163f61e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=1fba071c-6952-497a-bc54-3a8ca3de268e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=1fba071c-6952-497a-bc54-3a8ca3de268e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gx4r6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=1fba071c-6952-497a-bc54-3a8ca3de268e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=1fba071c-6952-497a-bc54-3a8ca3de268e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22163f61e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identity=11773 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=1fba071c-6952-497a-bc54-3a8ca3de268e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=1fba071c-6952-497a-bc54-3a8ca3de268e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gx4r6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=22163f61e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identity=11773 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gx4r6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22163f61e5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=520 identity=11773 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gx4r6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22163f61e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=520 identity=11773 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gx4r6 subsys=daemon level=info msg="Delete endpoint request" containerID=22163f61e5 endpointID=520 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-gx4r6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=1fba071c-6952-497a-bc54-3a8ca3de268e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=1fba071c-6952-497a-bc54-3a8ca3de268e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=22163f61e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=520 identity=11773 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gx4r6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 3946fe66-108a-45dd-a9d0-fc70a1f3b573 default }" containerID=45f7c907523db97f1c51aebea87f9291d75f41a6fa14146e1cf1adfb6c182460 datapathConfiguration="&{false false false false false }" interface=lxc7853c62e6d86 k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kc7p8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45f7c90752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kc7p8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45f7c90752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kc7p8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=45f7c90752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kc7p8 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=45f7c90752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=46589 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kc7p8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45f7c90752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=46589 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kc7p8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 f6a7a12b-682a-4282-9475-25140cf37c3d default }" containerID=dff420362d9741403accaca69abbe289556de74ce3e7bd8725a41963a9298db5 datapathConfiguration="&{false false false false false }" interface=lxc1a0f07940a09 k8sPodName=monitoring/kube-prometheus-stack-grafana-987799646-hjnqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dff420362d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-987799646-hjnqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dff420362d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-987799646-hjnqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dff420362d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=48842 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-987799646-hjnqb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dff420362d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=48842 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-987799646-hjnqb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 048d0cd2-046a-4e03-9452-c921c6df3246 default }" containerID=9296aa0efb2d2e7007470e89852d6ff2ce76edc8e5436d0aa9a545888b62bad4 datapathConfiguration="&{false false false false false }" interface=lxcfc2a9577dd7d k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sgjjw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9296aa0efb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sgjjw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9296aa0efb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sgjjw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9296aa0efb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=10592 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sgjjw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9296aa0efb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=10592 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sgjjw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45f7c90752 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=885 identity=46589 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kc7p8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45f7c90752 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=885 identity=46589 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kc7p8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dff420362d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2292 identity=48842 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-987799646-hjnqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=dff420362d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2292 identity=48842 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-987799646-hjnqb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9296aa0efb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=358 identity=10592 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sgjjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=9296aa0efb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=358 identity=10592 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sgjjw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.15 a4316757-3a0a-44be-8d65-a9b5a57396e4 default }" containerID=f1c2a2d4e2146a42f576a391886c0a909006fef800d84f51fe7b2c5da7409dcb datapathConfiguration="&{false false false false false }" interface=lxcf6e94f3f15eb k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s54ql labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1c2a2d4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s54ql subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1c2a2d4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=010e6e77-93a9-4fef-a93e-8c795161bf66,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=010e6e77-93a9-4fef-a93e-8c795161bf66,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s54ql subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=010e6e77-93a9-4fef-a93e-8c795161bf66;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=010e6e77-93a9-4fef-a93e-8c795161bf66;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1c2a2d4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 identity=3634 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=010e6e77-93a9-4fef-a93e-8c795161bf66,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=010e6e77-93a9-4fef-a93e-8c795161bf66,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s54ql oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1c2a2d4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 identity=3634 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s54ql subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1c2a2d4e2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=458 identity=3634 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s54ql subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1c2a2d4e2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=458 identity=3634 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s54ql subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.56 e480498d-48c3-4f1a-b32a-7232ff733b73 default }" containerID=0385bd3542420f5239404ada084446698c03c3af52116cefa91d5a5c9d4a5e3a datapathConfiguration="&{false false false false false }" interface=lxc9d8515b956f5 k8sPodName=local-path-storage/helper-pod-create-pvc-f398d54d-4a88-4220-999e-0a2c92d6f83f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0385bd3542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f398d54d-4a88-4220-999e-0a2c92d6f83f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0385bd3542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f398d54d-4a88-4220-999e-0a2c92d6f83f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0385bd3542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=14790 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f398d54d-4a88-4220-999e-0a2c92d6f83f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0385bd3542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=14790 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f398d54d-4a88-4220-999e-0a2c92d6f83f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0385bd3542 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=142 identity=14790 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f398d54d-4a88-4220-999e-0a2c92d6f83f subsys=endpoint level=info msg="Successful endpoint creation" containerID=0385bd3542 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=142 identity=14790 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f398d54d-4a88-4220-999e-0a2c92d6f83f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.18 e5fe524d-3056-4e02-91af-91b167ec8a3b default }" containerID=e57fcc4196bb588388197f1affaedcd9ee427df56a0bcd4acdf357d11df75d1b datapathConfiguration="&{false false false false false }" interface=lxc59b0958c5661 k8sPodName=local-path-storage/helper-pod-create-pvc-f9b475b9-81e3-41b0-aa2e-db7050cf1353 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e57fcc4196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9b475b9-81e3-41b0-aa2e-db7050cf1353 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e57fcc4196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9b475b9-81e3-41b0-aa2e-db7050cf1353 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e57fcc4196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identity=14790 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9b475b9-81e3-41b0-aa2e-db7050cf1353 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e57fcc4196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identity=14790 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9b475b9-81e3-41b0-aa2e-db7050cf1353 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e57fcc4196 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1270 identity=14790 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9b475b9-81e3-41b0-aa2e-db7050cf1353 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e57fcc4196 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1270 identity=14790 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9b475b9-81e3-41b0-aa2e-db7050cf1353 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f1c2a2d4e2 endpointID=458 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-s54ql subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=010e6e77-93a9-4fef-a93e-8c795161bf66 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=010e6e77-93a9-4fef-a93e-8c795161bf66 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f1c2a2d4e2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=458 identity=3634 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s54ql subsys=endpoint level=info msg="Delete endpoint request" containerID=0385bd3542 endpointID=142 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f398d54d-4a88-4220-999e-0a2c92d6f83f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=e57fcc4196 endpointID=1270 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f9b475b9-81e3-41b0-aa2e-db7050cf1353 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e57fcc4196 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1270 identity=14790 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9b475b9-81e3-41b0-aa2e-db7050cf1353 subsys=endpoint level=info msg="Removed endpoint" containerID=0385bd3542 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=142 identity=14790 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f398d54d-4a88-4220-999e-0a2c92d6f83f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 c5fd83c2-9c71-4349-8eb2-c7b8f132c0e3 default }" containerID=afc2c07f3a5b96913a2e743cc35813751528c57dca54dd82b9bc8bb0ed534844 datapathConfiguration="&{false false false false false }" interface=lxc5699c4ab9896 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afc2c07f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afc2c07f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=afc2c07f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=afc2c07f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identity=44506 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afc2c07f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identity=44506 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=afc2c07f3a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=71 identity=44506 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=afc2c07f3a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=71 identity=44506 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.2 f15ae29f-e6bb-4c59-bde3-5c76f2e48c7a default }" containerID=1947c746324ea1c21e1634fb0952fefe73741b258839cbe806790f8279460f23 datapathConfiguration="&{false false false false false }" interface=lxc0135bf247118 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1947c74632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1947c74632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1947c74632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=9900 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1947c74632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=9900 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1947c74632 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=316 identity=9900 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1947c74632 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=316 identity=9900 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 3bfd5346-9b6f-4122-966b-11084441d46a default }" containerID=5c8ea9ef2bfdeb6287eb55a345a198654e4fdbb6f8cd6667fea1ce73f65cfe7a datapathConfiguration="&{false false false false false }" interface=lxc7cb4fabe9ecd k8sPodName=local-path-storage/helper-pod-create-pvc-e482bacb-3b5e-4e3c-a9d8-801761d31772 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c8ea9ef2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1589 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e482bacb-3b5e-4e3c-a9d8-801761d31772 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c8ea9ef2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1589 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e482bacb-3b5e-4e3c-a9d8-801761d31772 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c8ea9ef2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1589 identity=14790 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e482bacb-3b5e-4e3c-a9d8-801761d31772 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c8ea9ef2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1589 identity=14790 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e482bacb-3b5e-4e3c-a9d8-801761d31772 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c8ea9ef2b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1589 identity=14790 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e482bacb-3b5e-4e3c-a9d8-801761d31772 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c8ea9ef2b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1589 identity=14790 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e482bacb-3b5e-4e3c-a9d8-801761d31772 subsys=daemon level=info msg="Delete endpoint request" containerID=5c8ea9ef2b endpointID=1589 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e482bacb-3b5e-4e3c-a9d8-801761d31772 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5c8ea9ef2b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1589 identity=14790 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e482bacb-3b5e-4e3c-a9d8-801761d31772 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 366dbdf1-508e-4d11-9371-e5c13e5f5edc default }" containerID=ea6bbc8611965ca90f4df5a05ef7e77ed3e9283e73d4bd1ea63a693945283ef0 datapathConfiguration="&{false false false false false }" interface=lxc0d80542c88f1 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea6bbc8611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea6bbc8611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea6bbc8611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 identity=31160 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea6bbc8611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 identity=31160 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea6bbc8611 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1569 identity=31160 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea6bbc8611 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1569 identity=31160 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 f539faa6-c426-4d48-b7d3-6f95b108e609 default }" containerID=ec6f6a4fde382760879e6337f6de203c38733ff16ce3d40784a8eaffdc26eb60 datapathConfiguration="&{false false false false false }" interface=lxc9141343b9485 k8sPodName=openstack/keystone-api-858d59bb66-sqhvn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec6f6a4fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-api-858d59bb66-sqhvn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec6f6a4fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-api-858d59bb66-sqhvn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec6f6a4fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=47070 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-api-858d59bb66-sqhvn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec6f6a4fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=47070 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-api-858d59bb66-sqhvn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 af407dee-8438-4bae-8437-f357f3afef94 default }" containerID=6e389a56a69a7252dd51580139cbcff5a730f037c628e584bdc75ec335921fd9 datapathConfiguration="&{false false false false false }" interface=lxcb12078c08ac1 k8sPodName=openstack/keystone-credential-setup-67mr2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e389a56a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-credential-setup-67mr2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e389a56a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bba8b32b-906c-439c-8aee-25a2ee51d700,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=bba8b32b-906c-439c-8aee-25a2ee51d700,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-credential-setup-67mr2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bba8b32b-906c-439c-8aee-25a2ee51d700;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=bba8b32b-906c-439c-8aee-25a2ee51d700;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e389a56a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identity=7813 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bba8b32b-906c-439c-8aee-25a2ee51d700,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=bba8b32b-906c-439c-8aee-25a2ee51d700,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-credential-setup-67mr2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e389a56a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identity=7813 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-credential-setup-67mr2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec6f6a4fde datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=293 identity=47070 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-api-858d59bb66-sqhvn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec6f6a4fde datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=293 identity=47070 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-api-858d59bb66-sqhvn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6e389a56a6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1876 identity=7813 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-credential-setup-67mr2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e389a56a6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1876 identity=7813 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-credential-setup-67mr2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e389a56a6 endpointID=1876 k8sNamespace=openstack k8sPodName=keystone-credential-setup-67mr2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bba8b32b-906c-439c-8aee-25a2ee51d700 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=bba8b32b-906c-439c-8aee-25a2ee51d700 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6e389a56a6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1876 identity=7813 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-credential-setup-67mr2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 7f62c409-b2bd-4b1c-b3f7-df6d569597a0 default }" containerID=54b3081d2b4380cf72a45b44ad04dae55efd789f7e49f13f091e37f0a290f629 datapathConfiguration="&{false false false false false }" interface=lxc415c779ec7dd k8sPodName=openstack/keystone-db-init-d8qsg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54b3081d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1792 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-d8qsg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54b3081d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1792 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b6dab26f-c14f-46f5-8775-2ede83f8c303,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b6dab26f-c14f-46f5-8775-2ede83f8c303,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-d8qsg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b6dab26f-c14f-46f5-8775-2ede83f8c303;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=b6dab26f-c14f-46f5-8775-2ede83f8c303;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=54b3081d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1792 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-d8qsg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=54b3081d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1792 identity=53150 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b6dab26f-c14f-46f5-8775-2ede83f8c303,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b6dab26f-c14f-46f5-8775-2ede83f8c303,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-d8qsg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54b3081d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1792 identity=53150 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-d8qsg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54b3081d2b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1792 identity=53150 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-d8qsg subsys=endpoint level=info msg="Successful endpoint creation" containerID=54b3081d2b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1792 identity=53150 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-d8qsg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=54b3081d2b endpointID=1792 k8sNamespace=openstack k8sPodName=keystone-db-init-d8qsg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b6dab26f-c14f-46f5-8775-2ede83f8c303 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=b6dab26f-c14f-46f5-8775-2ede83f8c303 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=54b3081d2b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1792 identity=53150 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-d8qsg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 b4aee417-c013-41d2-a0a2-5e30d40f4c50 default }" containerID=693c602f172f998fc642830c54e8beca526dd492f8f151e60f1ae9ff5a77074c datapathConfiguration="&{false false false false false }" interface=lxcdb6e3330df9c k8sPodName=openstack/keystone-fernet-setup-rljmv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=693c602f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-fernet-setup-rljmv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=693c602f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5d19214d-c4ee-4e09-9f16-654ccd363bb0,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5d19214d-c4ee-4e09-9f16-654ccd363bb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-fernet-setup-rljmv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5d19214d-c4ee-4e09-9f16-654ccd363bb0;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=5d19214d-c4ee-4e09-9f16-654ccd363bb0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=693c602f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=688 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5d19214d-c4ee-4e09-9f16-654ccd363bb0,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5d19214d-c4ee-4e09-9f16-654ccd363bb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-fernet-setup-rljmv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=693c602f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=688 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-fernet-setup-rljmv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=693c602f17 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=543 identity=688 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-fernet-setup-rljmv subsys=endpoint level=info msg="Successful endpoint creation" containerID=693c602f17 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=543 identity=688 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-fernet-setup-rljmv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=693c602f17 endpointID=543 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-rljmv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5d19214d-c4ee-4e09-9f16-654ccd363bb0 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=5d19214d-c4ee-4e09-9f16-654ccd363bb0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=693c602f17 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=543 identity=688 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-fernet-setup-rljmv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 12f16759-d813-4bc2-ac92-154ebd880ef1 default }" containerID=9b191e72f37526200f6b5447b9de0a727e944acb858ae62620ba136e789be379 datapathConfiguration="&{false false false false false }" interface=lxc19d9c43a0f27 k8sPodName=openstack/keystone-db-sync-gvr8q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b191e72f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3688 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-gvr8q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b191e72f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3688 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=02a23727-fc94-4f47-9c83-05b97cfe0fca,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=02a23727-fc94-4f47-9c83-05b97cfe0fca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-gvr8q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9b191e72f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3688 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-gvr8q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=02a23727-fc94-4f47-9c83-05b97cfe0fca;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=02a23727-fc94-4f47-9c83-05b97cfe0fca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b191e72f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3688 identity=4814 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=02a23727-fc94-4f47-9c83-05b97cfe0fca,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=02a23727-fc94-4f47-9c83-05b97cfe0fca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-gvr8q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b191e72f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3688 identity=4814 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-gvr8q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b191e72f3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3688 identity=4814 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-gvr8q subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b191e72f3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3688 identity=4814 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-gvr8q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9b191e72f3 endpointID=3688 k8sNamespace=openstack k8sPodName=keystone-db-sync-gvr8q subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=02a23727-fc94-4f47-9c83-05b97cfe0fca k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=02a23727-fc94-4f47-9c83-05b97cfe0fca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9b191e72f3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3688 identity=4814 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-gvr8q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 772e90ca-3610-4fe3-9bdd-2aaf0f166bd7 default }" containerID=4f4a8d901fd8f9c1ab809a0efc48a829f89aded98a25f9c635480f64285056d5 datapathConfiguration="&{false false false false false }" interface=lxc9db698663f87 k8sPodName=openstack/keystone-rabbit-init-gxggd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f4a8d901f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-rabbit-init-gxggd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f4a8d901f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2047c631-39c8-483e-bdf5-ab19d74e2127,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2047c631-39c8-483e-bdf5-ab19d74e2127,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-rabbit-init-gxggd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2047c631-39c8-483e-bdf5-ab19d74e2127;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2047c631-39c8-483e-bdf5-ab19d74e2127;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f4a8d901f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 identity=45869 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2047c631-39c8-483e-bdf5-ab19d74e2127,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2047c631-39c8-483e-bdf5-ab19d74e2127,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-rabbit-init-gxggd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4f4a8d901f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 identity=45869 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-rabbit-init-gxggd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f4a8d901f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1643 identity=45869 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-rabbit-init-gxggd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f4a8d901f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1643 identity=45869 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-rabbit-init-gxggd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4f4a8d901f endpointID=1643 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-gxggd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2047c631-39c8-483e-bdf5-ab19d74e2127 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2047c631-39c8-483e-bdf5-ab19d74e2127 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4f4a8d901f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1643 identity=45869 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-rabbit-init-gxggd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 8e706346-e983-4d36-adce-df0356c8259e default }" containerID=ded0d3dd6fd5512d379259ea4665e72eeaa259f20f8bc2b28b331f0081a576ae datapathConfiguration="&{false false false false false }" interface=lxc5a30f3a928fe k8sPodName=openstack/keystone-domain-manage-vvrkm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ded0d3dd6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-vvrkm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ded0d3dd6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5c947b14-54fa-42ca-8339-c68264579875,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=5c947b14-54fa-42ca-8339-c68264579875,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-vvrkm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5c947b14-54fa-42ca-8339-c68264579875;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=5c947b14-54fa-42ca-8339-c68264579875;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ded0d3dd6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identity=8549 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5c947b14-54fa-42ca-8339-c68264579875,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=5c947b14-54fa-42ca-8339-c68264579875,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-vvrkm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ded0d3dd6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identity=8549 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-vvrkm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ded0d3dd6f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=739 identity=8549 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-vvrkm subsys=endpoint level=info msg="Successful endpoint creation" containerID=ded0d3dd6f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=739 identity=8549 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-vvrkm subsys=daemon level=info msg="Delete endpoint request" containerID=ded0d3dd6f endpointID=739 k8sNamespace=openstack k8sPodName=keystone-domain-manage-vvrkm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5c947b14-54fa-42ca-8339-c68264579875 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=5c947b14-54fa-42ca-8339-c68264579875 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ded0d3dd6f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=739 identity=8549 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-vvrkm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 4a3ad288-ba51-482c-adef-9347f51604c9 default }" containerID=8aeb7d5be6cfd88f56b462ee161cbd3f031a5153079fa5adcb81ffe7a44e1710 datapathConfiguration="&{false false false false false }" interface=lxc8b626c3b060c k8sPodName=openstack/keystone-bootstrap-2t5q2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8aeb7d5be6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-2t5q2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8aeb7d5be6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e8c6bb55-b02c-4578-b0d8-12b8b4ba7f0f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e8c6bb55-b02c-4578-b0d8-12b8b4ba7f0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-2t5q2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e8c6bb55-b02c-4578-b0d8-12b8b4ba7f0f;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=e8c6bb55-b02c-4578-b0d8-12b8b4ba7f0f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8aeb7d5be6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=3081 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e8c6bb55-b02c-4578-b0d8-12b8b4ba7f0f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e8c6bb55-b02c-4578-b0d8-12b8b4ba7f0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-2t5q2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8aeb7d5be6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=3081 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-2t5q2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8aeb7d5be6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1390 identity=3081 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-2t5q2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8aeb7d5be6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1390 identity=3081 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-2t5q2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8aeb7d5be6 endpointID=1390 k8sNamespace=openstack k8sPodName=keystone-bootstrap-2t5q2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e8c6bb55-b02c-4578-b0d8-12b8b4ba7f0f k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=e8c6bb55-b02c-4578-b0d8-12b8b4ba7f0f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8aeb7d5be6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1390 identity=3081 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-2t5q2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 6aabb3b5-7adf-4b0a-bdf8-0d773ecad4a1 default }" containerID=f9f19f88148a7046de7ba96c971a2fb3af70923cde3510df9ee2bd10183056ac datapathConfiguration="&{false false false false false }" interface=lxc51dda494a607 k8sPodName=openstack/horizon-5f7d955596-lmrts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9f19f8814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/horizon-5f7d955596-lmrts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9f19f8814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/horizon-5f7d955596-lmrts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9f19f8814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identity=11225 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/horizon-5f7d955596-lmrts oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9f19f8814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identity=11225 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/horizon-5f7d955596-lmrts subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 b0539aa5-9449-4673-897d-9a28c8461b73 default }" containerID=89668796155e3e26bc09f0a1074868b41df072d8e89a1bb2df03e7cd2b452502 datapathConfiguration="&{false false false false false }" interface=lxc8e401e0f9787 k8sPodName=openstack/horizon-5f7d955596-h5l58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8966879615 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2191 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-5f7d955596-h5l58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8966879615 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2191 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-5f7d955596-h5l58 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8966879615 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2191 identity=11225 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-5f7d955596-h5l58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8966879615 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2191 identity=11225 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-5f7d955596-h5l58 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9f19f8814 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1370 identity=11225 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/horizon-5f7d955596-lmrts subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9f19f8814 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1370 identity=11225 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/horizon-5f7d955596-lmrts subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.81 1f0229ac-16d8-499e-a68d-ac9ad430f4c9 default }" containerID=aff9c16ea0c25cae007f51346911930376e96d8d19e2b9c634a92e6c4f54cdff datapathConfiguration="&{false false false false false }" interface=lxcdc8cbce7983d k8sPodName=openstack/horizon-db-init-7t6b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aff9c16ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/horizon-db-init-7t6b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aff9c16ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=76a6c2fa-f018-4eb1-a97e-7747349556f1,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=76a6c2fa-f018-4eb1-a97e-7747349556f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/horizon-db-init-7t6b2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.246 fdfcf4aa-7183-44ee-b117-ee556f9e3723 default }" containerID=2d2fa5f24098cdde0b7e7d53314ef802721283a276f6b9e58deaf9a93542612a datapathConfiguration="&{false false false false false }" interface=lxc5ccf6b7c141e k8sPodName=openstack/horizon-5f7d955596-v8lfp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d2fa5f240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/horizon-5f7d955596-v8lfp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d2fa5f240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/horizon-5f7d955596-v8lfp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2d2fa5f240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identity=11225 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/horizon-5f7d955596-v8lfp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d2fa5f240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identity=11225 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/horizon-5f7d955596-v8lfp subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=76a6c2fa-f018-4eb1-a97e-7747349556f1;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=76a6c2fa-f018-4eb1-a97e-7747349556f1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aff9c16ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=31691 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=76a6c2fa-f018-4eb1-a97e-7747349556f1,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=76a6c2fa-f018-4eb1-a97e-7747349556f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/horizon-db-init-7t6b2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aff9c16ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=31691 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/horizon-db-init-7t6b2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8966879615 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2191 identity=11225 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-5f7d955596-h5l58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8966879615 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2191 identity=11225 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-5f7d955596-h5l58 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2d2fa5f240 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1113 identity=11225 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/horizon-5f7d955596-v8lfp subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d2fa5f240 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1113 identity=11225 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/horizon-5f7d955596-v8lfp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aff9c16ea0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2428 identity=31691 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/horizon-db-init-7t6b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aff9c16ea0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2428 identity=31691 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/horizon-db-init-7t6b2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aff9c16ea0 endpointID=2428 k8sNamespace=openstack k8sPodName=horizon-db-init-7t6b2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=76a6c2fa-f018-4eb1-a97e-7747349556f1 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=76a6c2fa-f018-4eb1-a97e-7747349556f1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=aff9c16ea0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2428 identity=31691 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/horizon-db-init-7t6b2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 9eaef6b3-1a63-429b-8537-f01bc384a8cc default }" containerID=c5f2db5153c6af9b721789661fd60cf1ab95df67997800eaffb257a5d6be15df datapathConfiguration="&{false false false false false }" interface=lxc3b3cca564b01 k8sPodName=openstack/horizon-db-sync-768zr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5f2db5153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/horizon-db-sync-768zr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5f2db5153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=6ca9b151-61d3-415b-b686-cce8d79a5066,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=6ca9b151-61d3-415b-b686-cce8d79a5066,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/horizon-db-sync-768zr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c5f2db5153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=openstack/horizon-db-sync-768zr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=6ca9b151-61d3-415b-b686-cce8d79a5066;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=6ca9b151-61d3-415b-b686-cce8d79a5066;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5f2db5153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=27581 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=6ca9b151-61d3-415b-b686-cce8d79a5066,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=6ca9b151-61d3-415b-b686-cce8d79a5066,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/horizon-db-sync-768zr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5f2db5153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=27581 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/horizon-db-sync-768zr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5f2db5153 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=512 identity=27581 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/horizon-db-sync-768zr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5f2db5153 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=512 identity=27581 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/horizon-db-sync-768zr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c5f2db5153 endpointID=512 k8sNamespace=openstack k8sPodName=horizon-db-sync-768zr subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=6ca9b151-61d3-415b-b686-cce8d79a5066 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=6ca9b151-61d3-415b-b686-cce8d79a5066 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=c5f2db5153 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=512 identity=27581 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/horizon-db-sync-768zr subsys=endpoint