level=info msg="Memory available for map entries (0.003% of 16764960768B): 41912401B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="930.241µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="47.462µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.101578ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="28.811µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=111.312109ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.6µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="22.5µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="149.076µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="140.585µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="163.715µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="487.227µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.07µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.102536ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.358111ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="60.092µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="48.742µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="186.746µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="90.893µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="77.053µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.547779ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="156.535µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="5.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="5.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.124.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.856406ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="10.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.312544ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.890083ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.91µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="14.261µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="26.031µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="29.271µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="50.782µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="336.301µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.041µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.591µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="229.787µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="725.134µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.17509ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.7µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="22.141µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.124 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.124 ipAddr.ipv6="" k8sNodeIP=199.19.213.124 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.124" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.220" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.124" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.124} {CiliumInternalIP 10.0.0.220}] 10.0.0.0/24 [] [] 10.0.0.178 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:41661" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.340858388s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="592µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="96.703µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="126.184µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="13.7µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.302671755s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.177 0c61abf5-16c3-4fed-97a5-d2644853b342 default }" containerID=9077850202e3ae8efc63b5fc4b3cc5543059cfc6884b079675828ef23be4f628 datapathConfiguration="&{false false false false false }" interface=lxc06b375d47d53 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-f2tr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9077850202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-f2tr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9077850202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8dc935a9-efb0-4d76-8d97-daeea76b4f58,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8dc935a9-efb0-4d76-8d97-daeea76b4f58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-f2tr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.151 afc6f5d1-4eea-4ff0-bd0b-3025192a2c81 default }" containerID=cea8f45f9647cdb63bf7446c3f55ef089e987078ff5b81e8aae50775ad6d3e21 datapathConfiguration="&{false false false false false }" interface=lxc57ab7070713e k8sPodName=kube-system/coredns-7c96b6546b-t544p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cea8f45f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t544p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cea8f45f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t544p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cea8f45f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t544p line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=9077850202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-f2tr7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=8dc935a9-efb0-4d76-8d97-daeea76b4f58;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=8dc935a9-efb0-4d76-8d97-daeea76b4f58;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9077850202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identity=17427 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8dc935a9-efb0-4d76-8d97-daeea76b4f58,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8dc935a9-efb0-4d76-8d97-daeea76b4f58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-f2tr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9077850202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identity=17427 ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-f2tr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Compiled new BPF template" BPFCompilationTime=320.249044ms file-path=/var/run/cilium/state/templates/fb6478a6aecfcda814d540c2a3d408646f9f0bc2f4308fb93e0bc2cfa8c2b85e/bpf_host.o subsys=datapath-loader level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cea8f45f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identity=23095 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t544p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cea8f45f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identity=23095 ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t544p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=837 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 ipv4=10.0.0.178 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identityLabels="reserved:health" ipv4=10.0.0.178 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=4 identityLabels="reserved:health" ipv4=10.0.0.178 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.131647931s file-path=/var/run/cilium/state/templates/be4e81e5108271e8c6e8a6782f99e505dd9a15a6d7d39c938d8acc2e31d5a118/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=9077850202 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=459 identity=17427 ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-f2tr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9077850202 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=459 identity=17427 ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-f2tr7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cea8f45f96 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1603 identity=23095 ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t544p subsys=endpoint level=info msg="Successful endpoint creation" containerID=cea8f45f96 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1603 identity=23095 ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t544p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1433 identity=4 ipv4=10.0.0.178 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9077850202 endpointID=459 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-f2tr7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=8dc935a9-efb0-4d76-8d97-daeea76b4f58 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=8dc935a9-efb0-4d76-8d97-daeea76b4f58 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=9077850202 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=459 identity=17427 ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-f2tr7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 86952680-e6de-4fdc-b1c1-458b8f41c04e default }" containerID=0239aa353b57c9fd3a2b196d54a37789d2d7b985e851b5a991e67897d2d6bc57 datapathConfiguration="&{false false false false false }" interface=lxc4c1a46f45026 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-brxmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0239aa353b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 ipv4=10.0.0.14 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-brxmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0239aa353b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.14 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-brxmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0239aa353b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 identity=34255 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.14 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-brxmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0239aa353b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 identity=34255 ipv4=10.0.0.14 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-brxmx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0239aa353b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1427 identity=34255 ipv4=10.0.0.14 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-brxmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=0239aa353b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1427 identity=34255 ipv4=10.0.0.14 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-brxmx subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=837 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00837 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00837 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00837 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00837:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=837 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 022b7f8c-1653-46f6-bb1b-fa342531965f default }" containerID=0ca81d515fb329899ead87362cb2f7e4904a10f8cfdf977345a3c293410e883b datapathConfiguration="&{false false false false false }" interface=lxce1751a4bb1ed k8sPodName=kube-system/coredns-67659f764b-dpsxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ca81d515f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1100 ipv4=10.0.0.144 ipv6= k8sPodName=kube-system/coredns-67659f764b-dpsxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ca81d515f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1100 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.144 ipv6= k8sPodName=kube-system/coredns-67659f764b-dpsxf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0ca81d515f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1100 identity=23095 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.144 ipv6= k8sPodName=kube-system/coredns-67659f764b-dpsxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ca81d515f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1100 identity=23095 ipv4=10.0.0.144 ipv6= k8sPodName=kube-system/coredns-67659f764b-dpsxf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 a158d812-71d4-41f2-9e16-0d72b73b7788 default }" containerID=aa04a0e83c569959cfe6b0a9eb3332e2a70a4aa347a08cff3a80a6374bae3cad datapathConfiguration="&{false false false false false }" interface=lxcaa19713dba4b k8sPodName=kube-system/coredns-67659f764b-w6ngk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa04a0e83c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 ipv4=10.0.0.44 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6ngk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa04a0e83c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.44 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6ngk subsys=endpoint level=info msg="Identity of endpoint changed" containerID=aa04a0e83c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identity=23095 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.44 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6ngk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa04a0e83c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identity=23095 ipv4=10.0.0.44 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6ngk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ca81d515f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1100 identity=23095 ipv4=10.0.0.144 ipv6= k8sPodName=kube-system/coredns-67659f764b-dpsxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ca81d515f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1100 identity=23095 ipv4=10.0.0.144 ipv6= k8sPodName=kube-system/coredns-67659f764b-dpsxf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aa04a0e83c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=313 identity=23095 ipv4=10.0.0.44 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6ngk subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa04a0e83c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=313 identity=23095 ipv4=10.0.0.44 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6ngk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.92 a8ff4797-8340-4d1b-99d7-b8773383fbda default }" containerID=28e8f2fe11fd80a1191a2650f2adda476df88e4767bad8fecfbcaf7ec08b33f4 datapathConfiguration="&{false false false false false }" interface=lxc879b22d05021 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-h7vfs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28e8f2fe11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-h7vfs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28e8f2fe11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-h7vfs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=28e8f2fe11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-h7vfs line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=28e8f2fe11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 identity=11581 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-h7vfs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28e8f2fe11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 identity=11581 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-h7vfs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28e8f2fe11 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2268 identity=11581 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-h7vfs subsys=endpoint level=info msg="Successful endpoint creation" containerID=28e8f2fe11 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2268 identity=11581 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-h7vfs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cea8f45f96 endpointID=1603 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-t544p subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=cea8f45f96 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1603 identity=23095 ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t544p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 cb38f0c2-8831-4506-b769-6d16b5ca3b2a default }" containerID=a39185b73e9af3fd0cc2ec8e854c355bcb7ba74372ab2358cd57aab680e6d8f2 datapathConfiguration="&{false false false false false }" interface=lxc0742e12c7243 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g7p9f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a39185b73e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=899 ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g7p9f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a39185b73e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=899 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g7p9f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a39185b73e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=899 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g7p9f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a39185b73e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=899 identity=11828 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g7p9f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a39185b73e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=899 identity=11828 ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g7p9f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 5e260ddc-d58d-4109-bd11-594f6130f00a default }" containerID=02c7af0c03f2f0090fd909831e5a20b8201069889d2a74e3fb588ad660986acb datapathConfiguration="&{false false false false false }" interface=lxc022b5d72f8f1 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j79wf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02c7af0c03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j79wf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02c7af0c03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j79wf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02c7af0c03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=36268 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j79wf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02c7af0c03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=36268 ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j79wf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 3e3106e9-e912-473e-9f97-bbaedc7691b2 default }" containerID=39b6c9f6b7eb5edc846d0b4d7d30300c83c10e7bdfc96d35a9b0130f6fac07b4 datapathConfiguration="&{false false false false false }" interface=lxc024a75504a2c k8sPodName=cert-manager/cert-manager-75c4c745bc-bdmwz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39b6c9f6b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 ipv4=10.0.0.53 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bdmwz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39b6c9f6b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.53 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bdmwz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39b6c9f6b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identity=52892 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.53 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bdmwz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39b6c9f6b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identity=52892 ipv4=10.0.0.53 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bdmwz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a39185b73e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=899 identity=11828 ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g7p9f subsys=endpoint level=info msg="Successful endpoint creation" containerID=a39185b73e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=899 identity=11828 ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g7p9f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=02c7af0c03 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1267 identity=36268 ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j79wf subsys=endpoint level=info msg="Successful endpoint creation" containerID=02c7af0c03 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1267 identity=36268 ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j79wf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=39b6c9f6b7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=592 identity=52892 ipv4=10.0.0.53 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bdmwz subsys=endpoint level=info msg="Successful endpoint creation" containerID=39b6c9f6b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=592 identity=52892 ipv4=10.0.0.53 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bdmwz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.182 128abf89-0172-4687-b1aa-0a637ffc2bf7 default }" containerID=c0313475080a435e8769b5a98a85f29bd8ed1d5f7fd12c43ec7e9144d236ea68 datapathConfiguration="&{false false false false false }" interface=lxce73b50b15d13 k8sPodName=cert-manager/cert-manager-startupapicheck-4pb5g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c031347508 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4pb5g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c031347508 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=00880f09-949f-4ecf-9253-21ed2e83f6c8,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=00880f09-949f-4ecf-9253-21ed2e83f6c8,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4pb5g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=00880f09-949f-4ecf-9253-21ed2e83f6c8;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=00880f09-949f-4ecf-9253-21ed2e83f6c8;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c031347508 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identity=12880 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=00880f09-949f-4ecf-9253-21ed2e83f6c8,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=00880f09-949f-4ecf-9253-21ed2e83f6c8,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4pb5g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c031347508 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identity=12880 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4pb5g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c031347508 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2922 identity=12880 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4pb5g subsys=endpoint level=info msg="Successful endpoint creation" containerID=c031347508 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2922 identity=12880 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4pb5g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c031347508 endpointID=2922 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-4pb5g subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=00880f09-949f-4ecf-9253-21ed2e83f6c8 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=00880f09-949f-4ecf-9253-21ed2e83f6c8 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=c031347508 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2922 identity=12880 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4pb5g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 3d3f33f7-9572-4d8c-9727-05d57a022ffb default }" containerID=69df8801259f030c1be8c52fdefef6be4911673ffc6c4d21c1b02ff19ae17dc6 datapathConfiguration="&{false false false false false }" interface=lxcb20b461fcbe1 k8sPodName=ingress-nginx/ingress-nginx-admission-create-gxxxs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69df880125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gxxxs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69df880125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2dfbb4f7-83ab-44f5-8121-f0a02a9da2df,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=2dfbb4f7-83ab-44f5-8121-f0a02a9da2df,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gxxxs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=69df880125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gxxxs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=2dfbb4f7-83ab-44f5-8121-f0a02a9da2df;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=2dfbb4f7-83ab-44f5-8121-f0a02a9da2df;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69df880125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 identity=22048 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2dfbb4f7-83ab-44f5-8121-f0a02a9da2df,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=2dfbb4f7-83ab-44f5-8121-f0a02a9da2df,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gxxxs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69df880125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 identity=22048 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gxxxs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69df880125 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=64 identity=22048 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gxxxs subsys=endpoint level=info msg="Successful endpoint creation" containerID=69df880125 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=64 identity=22048 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gxxxs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=69df880125 endpointID=64 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-gxxxs subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=2dfbb4f7-83ab-44f5-8121-f0a02a9da2df k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=2dfbb4f7-83ab-44f5-8121-f0a02a9da2df k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=69df880125 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=64 identity=22048 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gxxxs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 75853624-057c-432b-a717-eb9404d6d2de default }" containerID=3ee2fdf83c185b0072f9d9224955686caee13428335b4137e13b1ce82e477791 datapathConfiguration="&{false false false false false }" interface=lxc36a8017c87c9 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5sj2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ee2fdf83c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5sj2t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ee2fdf83c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5sj2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ee2fdf83c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=59670 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5sj2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ee2fdf83c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=59670 ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5sj2t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3ee2fdf83c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=74 identity=59670 ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5sj2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ee2fdf83c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=74 identity=59670 ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5sj2t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.24 35115ff4-fe94-4453-965b-5e898f464485 default }" containerID=249750eb2c37e2860fd37c49b7a4ebd7a852d8e093332cf69ee1f9a3ad483d1f datapathConfiguration="&{false false false false false }" interface=lxc94c67caa3adf k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkd8z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=249750eb2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2605 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkd8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=249750eb2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2605 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=30d4a498-8d08-4132-af9b-8782f657dca6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=30d4a498-8d08-4132-af9b-8782f657dca6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkd8z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=30d4a498-8d08-4132-af9b-8782f657dca6;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=30d4a498-8d08-4132-af9b-8782f657dca6;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=249750eb2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2605 identity=29418 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=30d4a498-8d08-4132-af9b-8782f657dca6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=30d4a498-8d08-4132-af9b-8782f657dca6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkd8z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=249750eb2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2605 identity=29418 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkd8z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=249750eb2c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2605 identity=29418 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkd8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=249750eb2c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2605 identity=29418 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkd8z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=249750eb2c endpointID=2605 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-dkd8z subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=30d4a498-8d08-4132-af9b-8782f657dca6 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=30d4a498-8d08-4132-af9b-8782f657dca6 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=249750eb2c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2605 identity=29418 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkd8z subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=4d824979-d1d4-4b62-923d-b3c13739dd87] Description:}]" policyAddRequest=5b476ac7-fe66-458f-9a9f-71291430ff6b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5b476ac7-fe66-458f-9a9f-71291430ff6b policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=d13f578b-c79b-4183-bb9b-002ac8df1436] Description:}]" policyAddRequest=c4463cfd-c0ad-4c7e-b626-654bd6a0e63d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c4463cfd-c0ad-4c7e-b626-654bd6a0e63d policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.123 11743df6-4b66-4089-b260-6bfa88b773f8 default }" containerID=02e412439b10dd35a2cdab77a34b9e12d802467cc75932f52cafd27e3939f5f5 datapathConfiguration="&{false false false false false }" interface=lxcc0141b57e4b4 k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-h4rxj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02e412439b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-h4rxj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02e412439b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-h4rxj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.170 d984ae4b-16f2-408c-9ad7-bbe7485ceec1 default }" containerID=83374031e9a05112228c050c08e1347d786a7fc39144d86dcbcc7b71525b41ab datapathConfiguration="&{false false false false false }" interface=lxc9ba613fe337c k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2ltqf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83374031e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2ltqf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83374031e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2ltqf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=83374031e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2ltqf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02e412439b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identity=30157 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-h4rxj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02e412439b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identity=30157 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-h4rxj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83374031e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 identity=11744 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2ltqf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83374031e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 identity=11744 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2ltqf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02e412439b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=95 identity=30157 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-h4rxj subsys=endpoint level=info msg="Successful endpoint creation" containerID=02e412439b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=95 identity=30157 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-h4rxj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=83374031e9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3589 identity=11744 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2ltqf subsys=endpoint level=info msg="Successful endpoint creation" containerID=83374031e9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3589 identity=11744 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2ltqf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.222 c2072017-194a-4c79-9c13-4410f48dac9c default }" containerID=88884d6795bdbc4e391f332c370f45e7861fbdd8e8eb2c2572bf58686d2c934f datapathConfiguration="&{false false false false false }" interface=lxc88ec5f73c8ca k8sPodName=openstack/pxc-operator-7cff949c8b-qwphx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88884d6795 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qwphx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88884d6795 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qwphx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=88884d6795 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.222 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qwphx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88884d6795 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identity=10754 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qwphx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88884d6795 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identity=10754 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qwphx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88884d6795 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3189 identity=10754 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qwphx subsys=endpoint level=info msg="Successful endpoint creation" containerID=88884d6795 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3189 identity=10754 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qwphx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.179 dd9800ea-69f0-497c-84b1-44411d59d3a8 default }" containerID=02d38f31b0c61fa6175340b3b67ad85e9066686e985c507b40c620e4e7fe0b7b datapathConfiguration="&{false false false false false }" interface=lxc7c229273a4a1 k8sPodName=local-path-storage/helper-pod-create-pvc-66fbecf1-9377-4fcf-8e81-820108451930 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02d38f31b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2983 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66fbecf1-9377-4fcf-8e81-820108451930 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02d38f31b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2983 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66fbecf1-9377-4fcf-8e81-820108451930 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02d38f31b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2983 identity=6503 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66fbecf1-9377-4fcf-8e81-820108451930 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02d38f31b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2983 identity=6503 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66fbecf1-9377-4fcf-8e81-820108451930 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 69593d55-1e84-4ef4-be61-803940b7fc33 default }" containerID=d70a34a1fc0b5d0dad51ac324c69600ea848e219947bb3d134bdbcef98dfc9a7 datapathConfiguration="&{false false false false false }" interface=lxc5e1aba0dd890 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d70a34a1fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d70a34a1fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d70a34a1fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identity=36102 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d70a34a1fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identity=36102 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02d38f31b0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2983 identity=6503 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66fbecf1-9377-4fcf-8e81-820108451930 subsys=endpoint level=info msg="Successful endpoint creation" containerID=02d38f31b0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2983 identity=6503 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66fbecf1-9377-4fcf-8e81-820108451930 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d70a34a1fc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=445 identity=36102 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d70a34a1fc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=445 identity=36102 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=02d38f31b0 endpointID=2983 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-66fbecf1-9377-4fcf-8e81-820108451930 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=02d38f31b0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2983 identity=6503 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66fbecf1-9377-4fcf-8e81-820108451930 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 a6e7bf70-c3a1-4004-b885-96585aa8c414 default }" containerID=d8b083c6875410634a9ba668d14f7706f5ab0e2f1d8d4264491157819570598f datapathConfiguration="&{false false false false false }" interface=lxc219c02d0c7d6 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8b083c687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8b083c687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8b083c687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identity=49102 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d8b083c687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identity=49102 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8b083c687 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1603 identity=49102 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8b083c687 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1603 identity=49102 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.152 389777d1-a92c-4a65-bfd8-2e7546cb2d23 default }" containerID=7627b29bc4dc4a972e143edf5699b756984b3702438110eda9615ccd70af16fa datapathConfiguration="&{false false false false false }" interface=lxcabf76620a204 k8sPodName=openstack/memcached-memcached-6479589586-vrscw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7627b29bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vrscw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7627b29bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vrscw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7627b29bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=9342 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vrscw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7627b29bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=9342 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vrscw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7627b29bc4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=242 identity=9342 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vrscw subsys=endpoint level=info msg="Successful endpoint creation" containerID=7627b29bc4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=242 identity=9342 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vrscw subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=8079c32b-8539-4af5-9ec3-12a1e6cc8440] Description:}]" policyAddRequest=746885cf-151d-4ab1-bdfe-d34d6b32a039 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=746885cf-151d-4ab1-bdfe-d34d6b32a039 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.195 b57dbf0b-f232-48d6-92a7-eef0f4449335 default }" containerID=5304f5f702bad9dce10ae01b39818663094a28b70958107c7899f56fd60a1aed datapathConfiguration="&{false false false false false }" interface=lxcc6d8f789f84a k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5304f5f702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 ipv4=10.0.0.195 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5304f5f702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.195 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5304f5f702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identity=8334 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.195 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5304f5f702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identity=8334 ipv4=10.0.0.195 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5304f5f702 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2565 identity=8334 ipv4=10.0.0.195 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5304f5f702 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2565 identity=8334 ipv4=10.0.0.195 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=warning msg="Network status error received, restarting client connections" error="an error on the server (\"[+]ping ok\\n[+]log ok\\n[-]etcd failed: reason withheld\\n[+]poststarthook/start-kube-apiserver-admission-initializer ok\\n[+]poststarthook/generic-apiserver-start-informers ok\\n[+]poststarthook/priority-and-fairness-config-consumer ok\\n[+]poststarthook/priority-and-fairness-filter ok\\n[+]poststarthook/storage-object-count-tracker-hook ok\\n[+]poststarthook/start-apiextensions-informers ok\\n[+]poststarthook/start-apiextensions-controllers ok\\n[+]poststarthook/crd-informer-synced ok\\n[+]poststarthook/start-service-ip-repair-controllers ok\\n[+]poststarthook/rbac/bootstrap-roles ok\\n[+]poststarthook/scheduling/bootstrap-system-priority-classes ok\\n[+]poststarthook/priority-and-fairness-config-producer ok\\n[+]poststarthook/start-system-namespaces-controller ok\\n[+]poststarthook/bootstrap-controller ok\\n[+]poststarthook/start-cluster-authentication-info-controller ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-controller ok\\n[+]poststarthook/start-deprecated-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-legacy-token-tracking-controller ok\\n[+]poststarthook/aggregator-reload-proxy-client-cert ok\\n[+]poststarthook/start-kube-aggregator-informers ok\\n[+]poststarthook/apiservice-registration-controller ok\\n[+]poststarthook/apiservice-status-available-controller ok\\n[+]poststarthook/kube-apiserver-autoregistration ok\\n[+]autoregister-completion ok\\n[+]poststarthook/apiservice-openapi-controller ok\\n[+]poststarthook/apiservice-openapiv3-controller ok\\n[+]poststarthook/apiservice-discovery-controller ok\\nhealthz check failed\") has prevented the request from succeeding (get healthz.meta.k8s.io)" subsys=k8s-client level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03246294029647763 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.93 97ee8ff3-c595-4133-a087-7ac2eacd376f default }" containerID=75efbaaa951c777e65e26943f170988063cd8a1302a1b78abf15e27bfc9d3c30 datapathConfiguration="&{false false false false false }" interface=lxce331e97eda26 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4jht5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75efbaaa95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1749 ipv4=10.0.0.93 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4jht5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75efbaaa95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1749 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.93 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4jht5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75efbaaa95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1749 identity=17525 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.93 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4jht5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=75efbaaa95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1749 identity=17525 ipv4=10.0.0.93 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4jht5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75efbaaa95 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1749 identity=17525 ipv4=10.0.0.93 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4jht5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=75efbaaa95 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1749 identity=17525 ipv4=10.0.0.93 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4jht5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 44c5c1cc-49d1-4222-b2c9-ccbf66caa5d4 default }" containerID=17a022c727506f2b21cba252602c4863963662b0ab384aa000402ac79388e180 datapathConfiguration="&{false false false false false }" interface=lxc168d8367497e k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fhck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17a022c727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fhck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17a022c727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=bfa7272f-479c-4b73-82f6-a33b778d52da,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=bfa7272f-479c-4b73-82f6-a33b778d52da,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fhck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=bfa7272f-479c-4b73-82f6-a33b778d52da;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=bfa7272f-479c-4b73-82f6-a33b778d52da;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17a022c727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identity=26652 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=bfa7272f-479c-4b73-82f6-a33b778d52da,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=bfa7272f-479c-4b73-82f6-a33b778d52da,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fhck oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=17a022c727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identity=26652 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fhck subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17a022c727 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=739 identity=26652 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fhck subsys=endpoint level=info msg="Successful endpoint creation" containerID=17a022c727 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=739 identity=26652 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fhck subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=17a022c727 endpointID=739 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-7fhck subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=bfa7272f-479c-4b73-82f6-a33b778d52da k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=bfa7272f-479c-4b73-82f6-a33b778d52da k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=17a022c727 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=739 identity=26652 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fhck subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 e3c5c64c-e483-4076-b259-6c436077b4c9 default }" containerID=5d6067bf263a24e23154dd8c91516d270eb8025f664c2b9d083b744b7cccb56d datapathConfiguration="&{false false false false false }" interface=lxc2c1341eaf869 k8sPodName=monitoring/kube-prometheus-stack-grafana-77464646cc-l46sm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d6067bf26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-77464646cc-l46sm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d6067bf26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-77464646cc-l46sm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d6067bf26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identity=42848 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-77464646cc-l46sm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d6067bf26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identity=42848 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-77464646cc-l46sm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 75d4c477-5dc3-49ab-bbbd-89f7fc3fc5f5 default }" containerID=a6be1f9ec3cfa733aa79e5bbaeb2520e6484b9662eebe3cd015178171ee6fe95 datapathConfiguration="&{false false false false false }" interface=lxc5f711061aa36 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mdcft labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.155 77e3673e-309e-4c72-b935-e634506fc2f1 default }" containerID=394c5f779edf0e14bad751ba48e125e984c8d15d2443ee766ac3bab91223d136 datapathConfiguration="&{false false false false false }" interface=lxc76033d6a4dc5 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzdp6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6be1f9ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mdcft subsys=endpoint level=info msg="New endpoint" containerID=394c5f779e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzdp6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6be1f9ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mdcft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=394c5f779e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzdp6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6be1f9ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 identity=14472 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mdcft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6be1f9ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 identity=14472 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mdcft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=394c5f779e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identity=6320 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzdp6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=394c5f779e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identity=6320 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzdp6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d6067bf26 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2338 identity=42848 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-77464646cc-l46sm subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d6067bf26 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2338 identity=42848 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-77464646cc-l46sm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a6be1f9ec3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3184 identity=14472 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mdcft subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6be1f9ec3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3184 identity=14472 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mdcft subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=394c5f779e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1546 identity=6320 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzdp6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=394c5f779e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1546 identity=6320 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzdp6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.15 81d59448-6c7f-4fa1-ba6e-8b9735dc7ea2 default }" containerID=6ee8bc6901c8759b12026a2626569d08080e2dc411a89a66950bd8aa996f1646 datapathConfiguration="&{false false false false false }" interface=lxcecb0f04fcf8f k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n8nvj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ee8bc6901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n8nvj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ee8bc6901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=5c672ac5-b870-47d1-99b8-62bbab6b0381,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=5c672ac5-b870-47d1-99b8-62bbab6b0381,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n8nvj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=5c672ac5-b870-47d1-99b8-62bbab6b0381;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=5c672ac5-b870-47d1-99b8-62bbab6b0381;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ee8bc6901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=28331 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=5c672ac5-b870-47d1-99b8-62bbab6b0381,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=5c672ac5-b870-47d1-99b8-62bbab6b0381,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n8nvj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ee8bc6901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=28331 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n8nvj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6ee8bc6901 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=283 identity=28331 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n8nvj subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ee8bc6901 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=283 identity=28331 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n8nvj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6ee8bc6901 endpointID=283 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-n8nvj subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=5c672ac5-b870-47d1-99b8-62bbab6b0381 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=5c672ac5-b870-47d1-99b8-62bbab6b0381 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6ee8bc6901 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=283 identity=28331 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n8nvj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 c7306ef8-fff0-4a36-ab9b-795d11e09e07 default }" containerID=e20c39d77e0f215bca0c836b677af0f4057252764bf21d6590151ece747c24f2 datapathConfiguration="&{false false false false false }" interface=lxc3cb38f5e3c04 k8sPodName=local-path-storage/helper-pod-create-pvc-24d20e5d-7289-4e76-b42d-38fc737da755 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e20c39d77e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=750 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d20e5d-7289-4e76-b42d-38fc737da755 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e20c39d77e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=750 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d20e5d-7289-4e76-b42d-38fc737da755 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e20c39d77e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=750 identity=6503 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d20e5d-7289-4e76-b42d-38fc737da755 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e20c39d77e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=750 identity=6503 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d20e5d-7289-4e76-b42d-38fc737da755 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 8298e22e-f84e-44e8-9d38-252ecef27ddb default }" containerID=83008403744e3d6a41afea7ed416e3ad9574f2a7ba64f2d8ea488ae126c28173 datapathConfiguration="&{false false false false false }" interface=lxc9a49f6e91b24 k8sPodName=local-path-storage/helper-pod-create-pvc-d64f14c9-5648-4978-971a-179a1321eeb5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8300840374 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d64f14c9-5648-4978-971a-179a1321eeb5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8300840374 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d64f14c9-5648-4978-971a-179a1321eeb5 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8300840374 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identity=6503 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d64f14c9-5648-4978-971a-179a1321eeb5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8300840374 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identity=6503 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d64f14c9-5648-4978-971a-179a1321eeb5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e20c39d77e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=750 identity=6503 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d20e5d-7289-4e76-b42d-38fc737da755 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e20c39d77e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=750 identity=6503 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d20e5d-7289-4e76-b42d-38fc737da755 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8300840374 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2753 identity=6503 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d64f14c9-5648-4978-971a-179a1321eeb5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8300840374 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2753 identity=6503 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d64f14c9-5648-4978-971a-179a1321eeb5 subsys=daemon level=info msg="Delete endpoint request" containerID=e20c39d77e endpointID=750 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-24d20e5d-7289-4e76-b42d-38fc737da755 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=8300840374 endpointID=2753 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d64f14c9-5648-4978-971a-179a1321eeb5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e20c39d77e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=750 identity=6503 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d20e5d-7289-4e76-b42d-38fc737da755 subsys=endpoint level=info msg="Removed endpoint" containerID=8300840374 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2753 identity=6503 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d64f14c9-5648-4978-971a-179a1321eeb5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 c8363cdf-a9c6-46df-b774-83d8ab67c941 default }" containerID=7ad0496dae97d01ec5d065aa5dcb4b5574780345b1df493397aba945f4756abd datapathConfiguration="&{false false false false false }" interface=lxcba4aad845e6f k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ad0496dae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ad0496dae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ad0496dae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=52257 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ad0496dae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=52257 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 528a5982-864e-47b2-b949-0274b3d0c9f6 default }" containerID=134110592be3e9b3dc29852e0e84d0af30796a255bed91abe79840e64dba3e28 datapathConfiguration="&{false false false false false }" interface=lxc8e197e85f7dd k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=134110592b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=134110592b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=134110592b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identity=15148 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=134110592b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identity=15148 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ad0496dae datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1535 identity=52257 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ad0496dae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1535 identity=52257 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=134110592b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1087 identity=15148 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=134110592b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1087 identity=15148 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.209 3e7cbb02-2a82-43da-80ab-f486c6bfa347 default }" containerID=b4cfe85d6b56e0ba872bf63e47116b0ab70fda780e85c64da251e326ac45e78b datapathConfiguration="&{false false false false false }" interface=lxce98d6de606a2 k8sPodName=local-path-storage/helper-pod-create-pvc-13159ca1-f1ce-427f-b718-d3a799279084 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4cfe85d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13159ca1-f1ce-427f-b718-d3a799279084 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4cfe85d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13159ca1-f1ce-427f-b718-d3a799279084 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4cfe85d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 identity=6503 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13159ca1-f1ce-427f-b718-d3a799279084 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4cfe85d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 identity=6503 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13159ca1-f1ce-427f-b718-d3a799279084 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4cfe85d6b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2606 identity=6503 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13159ca1-f1ce-427f-b718-d3a799279084 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4cfe85d6b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2606 identity=6503 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13159ca1-f1ce-427f-b718-d3a799279084 subsys=daemon level=info msg="Delete endpoint request" containerID=b4cfe85d6b endpointID=2606 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-13159ca1-f1ce-427f-b718-d3a799279084 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b4cfe85d6b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2606 identity=6503 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13159ca1-f1ce-427f-b718-d3a799279084 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 1e2f645b-b05b-45f4-ba2e-6ef962142759 default }" containerID=395e09deb63999ff79ee86be11d906cefe8295007003325846f52933c083fb8c datapathConfiguration="&{false false false false false }" interface=lxc9b040ef4836f k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=395e09deb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=395e09deb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=395e09deb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=395e09deb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identity=12801 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=395e09deb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identity=12801 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=395e09deb6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1973 identity=12801 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=395e09deb6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1973 identity=12801 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 2f0f67b5-fed1-459a-a4db-d41fb99c3f51 default }" containerID=bc6b0a19630ac74a889518336e756b0e718f2c495c718a3251ebb24599fd1bff datapathConfiguration="&{false false false false false }" interface=lxc5c71e854bf60 k8sPodName=openstack/keystone-credential-setup-btb9m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc6b0a1963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-btb9m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc6b0a1963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=743309cc-63cb-4fd2-989e-0e49258af4fc,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=743309cc-63cb-4fd2-989e-0e49258af4fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-btb9m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=743309cc-63cb-4fd2-989e-0e49258af4fc;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=743309cc-63cb-4fd2-989e-0e49258af4fc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bc6b0a1963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-btb9m line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bc6b0a1963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identity=54698 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=743309cc-63cb-4fd2-989e-0e49258af4fc,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=743309cc-63cb-4fd2-989e-0e49258af4fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-btb9m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc6b0a1963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identity=54698 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-btb9m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc6b0a1963 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3196 identity=54698 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-btb9m subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc6b0a1963 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3196 identity=54698 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-btb9m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.194 b8dffc92-a22e-4e94-b15c-97f6871c4816 default }" containerID=ff42c0895a8546d169f5867e0348458d89c4c7ebfef9236f5ba09ecee579a9af datapathConfiguration="&{false false false false false }" interface=lxc0a123924bfdd k8sPodName=openstack/keystone-api-7569cf4d67-q76cb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff42c0895a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-7569cf4d67-q76cb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff42c0895a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-7569cf4d67-q76cb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff42c0895a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identity=42064 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-7569cf4d67-q76cb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff42c0895a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identity=42064 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-7569cf4d67-q76cb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff42c0895a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=486 identity=42064 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-7569cf4d67-q76cb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff42c0895a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=486 identity=42064 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-7569cf4d67-q76cb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bc6b0a1963 endpointID=3196 k8sNamespace=openstack k8sPodName=keystone-credential-setup-btb9m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=743309cc-63cb-4fd2-989e-0e49258af4fc k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=743309cc-63cb-4fd2-989e-0e49258af4fc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bc6b0a1963 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3196 identity=54698 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-btb9m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 594a6768-dad6-4d2a-b87d-762a04bddf4e default }" containerID=fd5ce9076bba2b4132544072dcaeda7cc9fc1a398a27d42144b77574166ec925 datapathConfiguration="&{false false false false false }" interface=lxcb865d58cc241 k8sPodName=openstack/keystone-db-init-8q74v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd5ce9076b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-8q74v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd5ce9076b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ce4571b0-8271-4791-abfb-b2b23f35df0d,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ce4571b0-8271-4791-abfb-b2b23f35df0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-8q74v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fd5ce9076b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-8q74v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ce4571b0-8271-4791-abfb-b2b23f35df0d;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=ce4571b0-8271-4791-abfb-b2b23f35df0d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd5ce9076b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identity=3569 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ce4571b0-8271-4791-abfb-b2b23f35df0d,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ce4571b0-8271-4791-abfb-b2b23f35df0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-8q74v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd5ce9076b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identity=3569 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-8q74v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd5ce9076b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1058 identity=3569 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-8q74v subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd5ce9076b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1058 identity=3569 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-8q74v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fd5ce9076b endpointID=1058 k8sNamespace=openstack k8sPodName=keystone-db-init-8q74v subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ce4571b0-8271-4791-abfb-b2b23f35df0d k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=ce4571b0-8271-4791-abfb-b2b23f35df0d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fd5ce9076b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1058 identity=3569 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-db-init-8q74v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 dbefcf0f-0e5e-4100-9ae2-fdfb2c6136cc default }" containerID=538bf726e4531ca8baa345cc1272b61f99e9192b273c0ed1c40f91c323cc41ff datapathConfiguration="&{false false false false false }" interface=lxc846ae739e586 k8sPodName=openstack/keystone-fernet-setup-qzxgb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=538bf726e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-fernet-setup-qzxgb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=538bf726e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7f5c83bc-c980-4929-b035-1798177efd03,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7f5c83bc-c980-4929-b035-1798177efd03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-fernet-setup-qzxgb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7f5c83bc-c980-4929-b035-1798177efd03;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=7f5c83bc-c980-4929-b035-1798177efd03;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=538bf726e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=23623 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7f5c83bc-c980-4929-b035-1798177efd03,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7f5c83bc-c980-4929-b035-1798177efd03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-fernet-setup-qzxgb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=538bf726e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=23623 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-fernet-setup-qzxgb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=538bf726e4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1604 identity=23623 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-fernet-setup-qzxgb subsys=endpoint level=info msg="Successful endpoint creation" containerID=538bf726e4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1604 identity=23623 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-fernet-setup-qzxgb subsys=daemon level=info msg="Delete endpoint request" containerID=538bf726e4 endpointID=1604 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-qzxgb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7f5c83bc-c980-4929-b035-1798177efd03 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=7f5c83bc-c980-4929-b035-1798177efd03 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=538bf726e4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1604 identity=23623 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-fernet-setup-qzxgb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 521db63c-0e0d-42d0-80ca-fb753385b8e1 default }" containerID=b9affe923f5ee6610a2f5869b1970df382872934cd0fe3123da7d55c5ebc2a41 datapathConfiguration="&{false false false false false }" interface=lxc7c05d5fa89f6 k8sPodName=openstack/keystone-db-sync-wl7dv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9affe923f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-db-sync-wl7dv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9affe923f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5833b018-d5ea-49a2-b03a-324f171a0222,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=5833b018-d5ea-49a2-b03a-324f171a0222,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-db-sync-wl7dv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b9affe923f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-db-sync-wl7dv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5833b018-d5ea-49a2-b03a-324f171a0222;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=5833b018-d5ea-49a2-b03a-324f171a0222;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9affe923f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 identity=48295 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5833b018-d5ea-49a2-b03a-324f171a0222,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=5833b018-d5ea-49a2-b03a-324f171a0222,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-db-sync-wl7dv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9affe923f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 identity=48295 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-db-sync-wl7dv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9affe923f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2772 identity=48295 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-db-sync-wl7dv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9affe923f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2772 identity=48295 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-db-sync-wl7dv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b9affe923f endpointID=2772 k8sNamespace=openstack k8sPodName=keystone-db-sync-wl7dv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5833b018-d5ea-49a2-b03a-324f171a0222 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=5833b018-d5ea-49a2-b03a-324f171a0222 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b9affe923f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2772 identity=48295 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-db-sync-wl7dv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 14a6ce8e-9594-4c09-a73e-9a80eccfd364 default }" containerID=4d744ea4901be96edcdcce4e7a191bc1f22d356f0c268987ba3330499b9d79c4 datapathConfiguration="&{false false false false false }" interface=lxc3266c0582d2f k8sPodName=openstack/keystone-rabbit-init-5p5jd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d744ea490 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5p5jd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d744ea490 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d3d48fca-a8e3-4ce1-8325-41117219864a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d3d48fca-a8e3-4ce1-8325-41117219864a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5p5jd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4d744ea490 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5p5jd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d3d48fca-a8e3-4ce1-8325-41117219864a;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d3d48fca-a8e3-4ce1-8325-41117219864a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d744ea490 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=4039 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d3d48fca-a8e3-4ce1-8325-41117219864a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d3d48fca-a8e3-4ce1-8325-41117219864a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5p5jd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d744ea490 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=4039 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5p5jd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d744ea490 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1809 identity=4039 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5p5jd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d744ea490 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1809 identity=4039 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5p5jd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d744ea490 endpointID=1809 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-5p5jd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d3d48fca-a8e3-4ce1-8325-41117219864a k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d3d48fca-a8e3-4ce1-8325-41117219864a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4d744ea490 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1809 identity=4039 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5p5jd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 f7f961e5-ecfe-4f51-a2c2-49c769ea9e3c default }" containerID=ae689387138b6105be5236fa43ae9af16b1a30898b4c2149a5aa5309c29bf3d3 datapathConfiguration="&{false false false false false }" interface=lxc4d35fc4b5631 k8sPodName=openstack/keystone-domain-manage-sbq5x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae68938713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-domain-manage-sbq5x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae68938713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4e3c5879-248d-4aee-badf-a64797ebd759,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=4e3c5879-248d-4aee-badf-a64797ebd759,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-domain-manage-sbq5x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4e3c5879-248d-4aee-badf-a64797ebd759;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=4e3c5879-248d-4aee-badf-a64797ebd759;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae68938713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identity=20892 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4e3c5879-248d-4aee-badf-a64797ebd759,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=4e3c5879-248d-4aee-badf-a64797ebd759,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-domain-manage-sbq5x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae68938713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identity=20892 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-domain-manage-sbq5x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae68938713 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3585 identity=20892 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-domain-manage-sbq5x subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae68938713 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3585 identity=20892 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-domain-manage-sbq5x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae68938713 endpointID=3585 k8sNamespace=openstack k8sPodName=keystone-domain-manage-sbq5x subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4e3c5879-248d-4aee-badf-a64797ebd759 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=4e3c5879-248d-4aee-badf-a64797ebd759 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ae68938713 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3585 identity=20892 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-domain-manage-sbq5x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 286f2301-b238-4ed5-91bc-d7c2f02a8e79 default }" containerID=c1100ed5e0e38fffec44ee1f4543d52b02a139748ac0d31f02a25c6a830ffe79 datapathConfiguration="&{false false false false false }" interface=lxc65cad598819c k8sPodName=openstack/keystone-bootstrap-6n6l9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1100ed5e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=727 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-bootstrap-6n6l9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1100ed5e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=727 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6f87ad79-6502-4a6c-8336-f82fcfcbf924,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6f87ad79-6502-4a6c-8336-f82fcfcbf924,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-bootstrap-6n6l9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6f87ad79-6502-4a6c-8336-f82fcfcbf924;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=6f87ad79-6502-4a6c-8336-f82fcfcbf924;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1100ed5e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=727 identity=32666 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6f87ad79-6502-4a6c-8336-f82fcfcbf924,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6f87ad79-6502-4a6c-8336-f82fcfcbf924,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-bootstrap-6n6l9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1100ed5e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=727 identity=32666 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-bootstrap-6n6l9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c1100ed5e0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=727 identity=32666 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-bootstrap-6n6l9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1100ed5e0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=727 identity=32666 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-bootstrap-6n6l9 subsys=daemon level=info msg="Delete endpoint request" containerID=c1100ed5e0 endpointID=727 k8sNamespace=openstack k8sPodName=keystone-bootstrap-6n6l9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6f87ad79-6502-4a6c-8336-f82fcfcbf924 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=6f87ad79-6502-4a6c-8336-f82fcfcbf924 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c1100ed5e0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=727 identity=32666 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-bootstrap-6n6l9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 fbeb94fa-a62c-4e48-aaac-1d0744b7afad default }" containerID=a59a3a8bb05ca6b0f64ff42f7471b6c67a0059911a7b57a5126927883b161557 datapathConfiguration="&{false false false false false }" interface=lxceeafc75c8c1c k8sPodName=openstack/horizon-665ccf6d6b-bngn8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a59a3a8bb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-bngn8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a59a3a8bb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-bngn8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a59a3a8bb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identity=58005 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-bngn8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a59a3a8bb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identity=58005 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-bngn8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 dbe0e6e7-6f41-414f-85b9-d702dcdf295a default }" containerID=1be4bae42eca5f48b739a4353724702c7e9a582651f5c86fbc6e7301ff599768 datapathConfiguration="&{false false false false false }" interface=lxca33fdc2ac4df k8sPodName=openstack/horizon-665ccf6d6b-rkbvn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1be4bae42e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-rkbvn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1be4bae42e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-rkbvn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1be4bae42e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=58005 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-rkbvn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1be4bae42e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=58005 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-rkbvn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 647ae4fd-ae35-4eaf-947d-98355f0549e5 default }" containerID=5f8a7f63e32d923ed72868e262380895beb5f33398d2b4675da558c4fd7430a0 datapathConfiguration="&{false false false false false }" interface=lxcc29a136eaa99 k8sPodName=openstack/horizon-665ccf6d6b-62whv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f8a7f63e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-62whv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f8a7f63e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-62whv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5f8a7f63e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identity=58005 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-62whv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f8a7f63e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identity=58005 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-62whv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a59a3a8bb0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=579 identity=58005 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-bngn8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a59a3a8bb0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=579 identity=58005 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-bngn8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1be4bae42e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1080 identity=58005 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-rkbvn subsys=endpoint level=info msg="Successful endpoint creation" containerID=1be4bae42e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1080 identity=58005 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-rkbvn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.181 c1a5059f-16ff-4c45-bda5-d4d45d14cf9e default }" containerID=81d3352d8cc2df7a4f0e2a95ff758407a32b96f864ca532f97868caee70e6a63 datapathConfiguration="&{false false false false false }" interface=lxc0a9337b05cf0 k8sPodName=openstack/horizon-db-init-rtvfr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81d3352d8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/horizon-db-init-rtvfr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81d3352d8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=c09f1559-2b0b-4ed0-a964-7102285d72d9,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=c09f1559-2b0b-4ed0-a964-7102285d72d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/horizon-db-init-rtvfr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=c09f1559-2b0b-4ed0-a964-7102285d72d9;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=c09f1559-2b0b-4ed0-a964-7102285d72d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81d3352d8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 identity=26556 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=c09f1559-2b0b-4ed0-a964-7102285d72d9,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=c09f1559-2b0b-4ed0-a964-7102285d72d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/horizon-db-init-rtvfr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81d3352d8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 identity=26556 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/horizon-db-init-rtvfr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f8a7f63e3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=352 identity=58005 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-62whv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f8a7f63e3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=352 identity=58005 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/horizon-665ccf6d6b-62whv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=81d3352d8c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2673 identity=26556 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/horizon-db-init-rtvfr subsys=endpoint level=info msg="Successful endpoint creation" containerID=81d3352d8c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2673 identity=26556 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/horizon-db-init-rtvfr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=81d3352d8c endpointID=2673 k8sNamespace=openstack k8sPodName=horizon-db-init-rtvfr subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=c09f1559-2b0b-4ed0-a964-7102285d72d9 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=c09f1559-2b0b-4ed0-a964-7102285d72d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=81d3352d8c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2673 identity=26556 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/horizon-db-init-rtvfr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 30213f41-71ba-4b76-a5d6-5cb2911abf30 default }" containerID=40c10ff644dd9c08736b69b9bccca7234c063360155b46befbd20a56914e9fca datapathConfiguration="&{false false false false false }" interface=lxcb144c65479cb k8sPodName=openstack/horizon-db-sync-qmcf2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40c10ff644 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-db-sync-qmcf2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40c10ff644 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=fcd53317-e12c-4f0e-976a-073feab9a68b,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=fcd53317-e12c-4f0e-976a-073feab9a68b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-db-sync-qmcf2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=fcd53317-e12c-4f0e-976a-073feab9a68b;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=fcd53317-e12c-4f0e-976a-073feab9a68b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40c10ff644 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=54380 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=fcd53317-e12c-4f0e-976a-073feab9a68b,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=fcd53317-e12c-4f0e-976a-073feab9a68b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-db-sync-qmcf2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40c10ff644 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=54380 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-db-sync-qmcf2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40c10ff644 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=440 identity=54380 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-db-sync-qmcf2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=40c10ff644 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=440 identity=54380 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-db-sync-qmcf2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=40c10ff644 endpointID=440 k8sNamespace=openstack k8sPodName=horizon-db-sync-qmcf2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=fcd53317-e12c-4f0e-976a-073feab9a68b k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=fcd53317-e12c-4f0e-976a-073feab9a68b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=40c10ff644 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=440 identity=54380 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-db-sync-qmcf2 subsys=endpoint