level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="876.832µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="41.241µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="875.511µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.42µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=98.32147ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.08µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="12.631µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="54.351µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="54.471µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="59.662µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="393.15µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.42µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.160523ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=10.299188ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="65.421µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="139.303µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="452.222µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="226.625µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="162.424µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=55.545259ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="92.962µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.81.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.956265ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="8.36µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.814949ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.096796ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="66.361µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="42.101µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="74.562µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="287.337µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.951µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.26µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="870.462µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="757.088µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.511367ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.64µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.9µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.81 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.81 ipAddr.ipv6="" k8sNodeIP=199.19.213.81 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.81" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.91" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.81" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.81} {CiliumInternalIP 10.0.0.91}] 10.0.0.0/24 [] [] 10.0.0.88 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42983" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.465106663s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="18.82µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="8.61µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="44.631µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="2.89µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.443547479s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.168 eea370a5-ae3e-4fdb-ab5f-70809e76731a default }" containerID=f9f7b89a87bb272644937fee706adb6c5c36aaf2567b4afd8094f5ea90a91991 datapathConfiguration="&{false false false false false }" interface=lxc1666d82a67f6 k8sPodName=kube-system/coredns-7c96b6546b-v5w99 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.155 69378a4f-820e-4b26-9c8d-6328e5c82b45 default }" containerID=8be438c85b58d09a41916426e34a6e142c5c2871186598e8c21a9d9b290536a3 datapathConfiguration="&{false false false false false }" interface=lxca56d7ca40e39 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7bdt8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9f7b89a87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v5w99 subsys=endpoint level=info msg="New endpoint" containerID=8be438c85b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 ipv4=10.0.0.155 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7bdt8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9f7b89a87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v5w99 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=8be438c85b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=82c3e8a8-9309-4ffc-a152-34e23566df7a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=82c3e8a8-9309-4ffc-a152-34e23566df7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.155 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7bdt8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8be438c85b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7bdt8 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=f9f7b89a87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v5w99 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9f7b89a87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identity=2967 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v5w99 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9f7b89a87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identity=2967 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v5w99 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=82c3e8a8-9309-4ffc-a152-34e23566df7a;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=82c3e8a8-9309-4ffc-a152-34e23566df7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8be438c85b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=49214 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=82c3e8a8-9309-4ffc-a152-34e23566df7a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=82c3e8a8-9309-4ffc-a152-34e23566df7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.155 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7bdt8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8be438c85b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=49214 ipv4=10.0.0.155 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7bdt8 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=329.260604ms file-path=/var/run/cilium/state/templates/67061c438e7baebf78559009e03352903707da652eeb3555f2c15009f8f4db4b/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1310 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 ipv4=10.0.0.88 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 identityLabels="reserved:health" ipv4=10.0.0.88 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 identity=4 identityLabels="reserved:health" ipv4=10.0.0.88 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.141872386s file-path=/var/run/cilium/state/templates/ed781e363d0ce4d32a44912e81f8440d5d98e6fb46ac88ff4be23d60fc928677/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3295 identity=4 ipv4=10.0.0.88 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9f7b89a87 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1235 identity=2967 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v5w99 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9f7b89a87 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1235 identity=2967 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v5w99 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8be438c85b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=10 identity=49214 ipv4=10.0.0.155 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7bdt8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8be438c85b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=10 identity=49214 ipv4=10.0.0.155 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7bdt8 subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8be438c85b endpointID=10 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-7bdt8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=82c3e8a8-9309-4ffc-a152-34e23566df7a k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=82c3e8a8-9309-4ffc-a152-34e23566df7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=8be438c85b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=10 identity=49214 ipv4=10.0.0.155 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7bdt8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 a60ad359-0e83-4fca-8407-fe2dbefdf63a default }" containerID=3ba5a679b7e5ce56b7c880713834b12e977a7e8883581753758804cb87cb5000 datapathConfiguration="&{false false false false false }" interface=lxcb0c71536a6ce k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cprjc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ba5a679b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 ipv4=10.0.0.187 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cprjc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ba5a679b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.187 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cprjc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ba5a679b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=12737 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.187 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cprjc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ba5a679b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=12737 ipv4=10.0.0.187 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cprjc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3ba5a679b7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=650 identity=12737 ipv4=10.0.0.187 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cprjc subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ba5a679b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=650 identity=12737 ipv4=10.0.0.187 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cprjc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1310 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01310 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01310 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01310 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01310:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1310 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 f0e4535f-31c8-471d-b9ff-d2be0b7d8a90 default }" containerID=5f5fffee999ed749576a4e33295dfe79f673cc143fcdb16a2a651784e7066547 datapathConfiguration="&{false false false false false }" interface=lxcdffba3490436 k8sPodName=kube-system/coredns-67659f764b-zm7pq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f5fffee99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-zm7pq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f5fffee99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-zm7pq subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5f5fffee99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 identity=2967 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-zm7pq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f5fffee99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 identity=2967 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-zm7pq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 236d558b-900a-474e-98e0-8be0e9332ebf default }" containerID=fb28617b7aaee6e963ae14df4402453eb8cadf5889282c932292816662f1bb91 datapathConfiguration="&{false false false false false }" interface=lxcf4dee999a20a k8sPodName=kube-system/coredns-67659f764b-r5ls9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb28617b7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3836 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-67659f764b-r5ls9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb28617b7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3836 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-67659f764b-r5ls9 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fb28617b7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3836 identity=2967 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-67659f764b-r5ls9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb28617b7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3836 identity=2967 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-67659f764b-r5ls9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f5fffee99 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2815 identity=2967 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-zm7pq subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f5fffee99 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2815 identity=2967 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-zm7pq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fb28617b7a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3836 identity=2967 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-67659f764b-r5ls9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb28617b7a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3836 identity=2967 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-67659f764b-r5ls9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.24 e7e73f26-bdc8-487f-843d-8b2ed8eabb6c default }" containerID=1750b11c365c2351477ba94dedcc45f25dfefb7750973d0ab6ce1ae671b30e1a datapathConfiguration="&{false false false false false }" interface=lxc9b68dea43237 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z9t5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1750b11c36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2266 ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z9t5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1750b11c36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2266 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z9t5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1750b11c36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2266 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z9t5f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1750b11c36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2266 identity=5674 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z9t5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1750b11c36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2266 identity=5674 ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z9t5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1750b11c36 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2266 identity=5674 ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z9t5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=1750b11c36 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2266 identity=5674 ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z9t5f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f9f7b89a87 endpointID=1235 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-v5w99 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=f9f7b89a87 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1235 identity=2967 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v5w99 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 10b3f8e2-c01e-4867-b23c-eba53ab731f6 default }" containerID=a5d73982e08c8c4de24c4dbff531f68da5f3e5cd908833e17921f59a97da32cd datapathConfiguration="&{false false false false false }" interface=lxc7a1a90c344bf k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-mhprb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5d73982e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2302 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-mhprb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5d73982e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2302 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-mhprb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5d73982e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2302 identity=33678 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-mhprb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5d73982e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2302 identity=33678 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-mhprb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.250 663d3b4a-c581-4cec-90f5-6c12c7092dc4 default }" containerID=4e631372cfbdeb1635c3f8c48ee9dd8ed68f1707d313b1e74ac53c97d52371fb datapathConfiguration="&{false false false false false }" interface=lxc5b009ccef4e8 k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-ks44f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e631372cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2957 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-ks44f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e631372cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2957 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-ks44f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e631372cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2957 identity=37684 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-ks44f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e631372cf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2957 identity=37684 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-ks44f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 509dd8a9-4306-489e-8171-6df512559f96 default }" containerID=8deea780b7a01cacc708c1b157d7219702deaba2bdd92eb6414741deb652bb65 datapathConfiguration="&{false false false false false }" interface=lxc97623833d6fb k8sPodName=cert-manager/cert-manager-79c48d47db-7r9jp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8deea780b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-7r9jp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8deea780b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-7r9jp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8deea780b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identity=24024 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-7r9jp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8deea780b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identity=24024 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-7r9jp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5d73982e0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2302 identity=33678 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-mhprb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5d73982e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2302 identity=33678 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-mhprb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8deea780b7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=318 identity=24024 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-7r9jp subsys=endpoint level=info msg="Successful endpoint creation" containerID=8deea780b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=318 identity=24024 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-7r9jp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4e631372cf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2957 identity=37684 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-ks44f subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e631372cf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2957 identity=37684 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-ks44f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.107 017eff2f-e96f-483e-be49-4c549d108d2e default }" containerID=bbd7c211737ce77f73e4ca22aa49b7517ca16f4b00ef47eec6325bfe37f258f3 datapathConfiguration="&{false false false false false }" interface=lxcf6f68c3fa961 k8sPodName=cert-manager/cert-manager-startupapicheck-d2h68 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbd7c21173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-d2h68 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbd7c21173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=d958976a-1471-4ba1-8bcd-39e605daf11c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=d958976a-1471-4ba1-8bcd-39e605daf11c,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-d2h68 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=d958976a-1471-4ba1-8bcd-39e605daf11c;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=d958976a-1471-4ba1-8bcd-39e605daf11c;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bbd7c21173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=16878 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=d958976a-1471-4ba1-8bcd-39e605daf11c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=d958976a-1471-4ba1-8bcd-39e605daf11c,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-d2h68 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbd7c21173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=16878 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-d2h68 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bbd7c21173 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=26 identity=16878 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-d2h68 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbd7c21173 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=26 identity=16878 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-d2h68 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bbd7c21173 endpointID=26 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-d2h68 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=d958976a-1471-4ba1-8bcd-39e605daf11c k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=d958976a-1471-4ba1-8bcd-39e605daf11c k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=bbd7c21173 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=26 identity=16878 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-d2h68 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 3de62310-8733-4e92-b0c3-cc46d0273087 default }" containerID=6490bde4ca8fd62732849e830e9c89303e424bb77f9470f2ff0b7468257689ab datapathConfiguration="&{false false false false false }" interface=lxcd390ad478540 k8sPodName=ingress-nginx/ingress-nginx-admission-create-stgzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6490bde4ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-stgzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6490bde4ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=91801a3a-2c40-45b7-884c-be132113200e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=91801a3a-2c40-45b7-884c-be132113200e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-stgzm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=91801a3a-2c40-45b7-884c-be132113200e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=91801a3a-2c40-45b7-884c-be132113200e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6490bde4ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identity=20627 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=91801a3a-2c40-45b7-884c-be132113200e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=91801a3a-2c40-45b7-884c-be132113200e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-stgzm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6490bde4ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identity=20627 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-stgzm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6490bde4ca datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1272 identity=20627 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-stgzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6490bde4ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1272 identity=20627 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-stgzm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6490bde4ca endpointID=1272 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-stgzm subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=91801a3a-2c40-45b7-884c-be132113200e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=91801a3a-2c40-45b7-884c-be132113200e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=6490bde4ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1272 identity=20627 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-stgzm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 ed67b135-08d3-4334-9263-7012a03be966 default }" containerID=cfca5bedbe956be05afa00f167786cd99936d6ca1de2eb942c78cbb14bb1ebfd datapathConfiguration="&{false false false false false }" interface=lxc44f8023124e2 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cbmqd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfca5bedbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cbmqd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfca5bedbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cbmqd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=cfca5bedbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cbmqd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cfca5bedbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 identity=30675 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cbmqd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cfca5bedbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 identity=30675 ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cbmqd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cfca5bedbe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1983 identity=30675 ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cbmqd subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfca5bedbe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1983 identity=30675 ipv4=10.0.0.64 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cbmqd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.134 f3a8b6fb-b65b-4d9e-b92e-0ba1504e49fb default }" containerID=d4280c4ddce0189cb162a1d2cd8f86e81ed16c34fcd797bb50ae8a005f605bcb datapathConfiguration="&{false false false false false }" interface=lxc881cf8b7ad8b k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2g82j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4280c4ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2g82j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4280c4ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3ccbadb9-199c-4c3b-ab54-64b9fc61f0a3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3ccbadb9-199c-4c3b-ab54-64b9fc61f0a3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2g82j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3ccbadb9-199c-4c3b-ab54-64b9fc61f0a3;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=3ccbadb9-199c-4c3b-ab54-64b9fc61f0a3;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4280c4ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identity=55545 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3ccbadb9-199c-4c3b-ab54-64b9fc61f0a3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3ccbadb9-199c-4c3b-ab54-64b9fc61f0a3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2g82j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4280c4ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identity=55545 ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2g82j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4280c4ddc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3001 identity=55545 ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2g82j subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4280c4ddc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3001 identity=55545 ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2g82j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d4280c4ddc endpointID=3001 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-2g82j subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3ccbadb9-199c-4c3b-ab54-64b9fc61f0a3 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=3ccbadb9-199c-4c3b-ab54-64b9fc61f0a3 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=d4280c4ddc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3001 identity=55545 ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2g82j subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=a0077af8-86ad-4d42-a26a-9ed4205487ca] Description:}]" policyAddRequest=c2d72006-fc95-4a0e-9f3d-479ae4f7a985 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c2d72006-fc95-4a0e-9f3d-479ae4f7a985 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=23c85abf-8dd9-47c9-a1d7-90ad011ff1de] Description:}]" policyAddRequest=158df522-51da-43d1-be15-f8ac16c16b07 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=158df522-51da-43d1-be15-f8ac16c16b07 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.71 4bb4e7b3-f3df-4683-b9ea-77723cab963f default }" containerID=849a12cc8074374feb042d66e9d609257a9f77946629024e8734a7eb8476a0ab datapathConfiguration="&{false false false false false }" interface=lxc64a2f8a31b67 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h5g2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=849a12cc80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h5g2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=849a12cc80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h5g2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=849a12cc80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identity=14588 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h5g2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=849a12cc80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identity=14588 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h5g2d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=849a12cc80 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1337 identity=14588 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h5g2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=849a12cc80 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1337 identity=14588 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h5g2d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.211 3fc4069b-1901-451f-a997-b69cc8e20bee default }" containerID=daf356a691161e0df91ef57eecc14cb610d8a6250815d84def398f83fe414b77 datapathConfiguration="&{false false false false false }" interface=lxcc54027dbc52f k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jppjs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=daf356a691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3506 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jppjs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=daf356a691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3506 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jppjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=daf356a691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3506 identity=43349 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jppjs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=daf356a691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3506 identity=43349 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jppjs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=daf356a691 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3506 identity=43349 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jppjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=daf356a691 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3506 identity=43349 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jppjs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.167 316671c3-4fe2-4fc9-a49b-a55232565f0b default }" containerID=9fd03723944756e6e55fcef33714bd96c38f413d118da5ff29b05044ee1b454e datapathConfiguration="&{false false false false false }" interface=lxcb17ccc17c2fa k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92kd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fd0372394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92kd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fd0372394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92kd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9fd0372394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=21583 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92kd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9fd0372394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=21583 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92kd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9fd0372394 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=88 identity=21583 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92kd subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fd0372394 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=88 identity=21583 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l92kd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.7 716a4b92-415a-41dc-bab5-68414afcf5d7 default }" containerID=a1d0728146c899f94b3f88caf1884253cb0663f0dc3b18ff765d48565a15e35e datapathConfiguration="&{false false false false false }" interface=lxcd29d052712d1 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1d0728146 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1d0728146 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1d0728146 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=3913 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a1d0728146 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=3913 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1d0728146 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=387 identity=3913 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1d0728146 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=387 identity=3913 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 3cf7aba7-87b5-430d-9f1a-3b7caae21518 default }" containerID=6419a98e6142dffb7d3e51af96101a48168b4a00643b99876ff9105ef0d1aca0 datapathConfiguration="&{false false false false false }" interface=lxc06b4f48023d9 k8sPodName=local-path-storage/helper-pod-create-pvc-d94c0f09-6601-4b1d-9f5e-d4fcf4328898 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6419a98e61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d94c0f09-6601-4b1d-9f5e-d4fcf4328898 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6419a98e61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d94c0f09-6601-4b1d-9f5e-d4fcf4328898 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6419a98e61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=18357 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d94c0f09-6601-4b1d-9f5e-d4fcf4328898 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6419a98e61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=18357 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d94c0f09-6601-4b1d-9f5e-d4fcf4328898 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6419a98e61 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=620 identity=18357 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d94c0f09-6601-4b1d-9f5e-d4fcf4328898 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6419a98e61 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=620 identity=18357 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d94c0f09-6601-4b1d-9f5e-d4fcf4328898 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6419a98e61 endpointID=620 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d94c0f09-6601-4b1d-9f5e-d4fcf4328898 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6419a98e61 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=620 identity=18357 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d94c0f09-6601-4b1d-9f5e-d4fcf4328898 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 8ee83f69-32b3-4052-9f17-518a07bcf94b default }" containerID=e5cf561d95edb557b25bcb2262e0cd82ee4fa4e9aaabee8cfc81fe1db3eac780 datapathConfiguration="&{false false false false false }" interface=lxc7d12e4c323ee k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5cf561d95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2625 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5cf561d95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2625 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5cf561d95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2625 identity=35055 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5cf561d95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2625 identity=35055 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e5cf561d95 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2625 identity=35055 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5cf561d95 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2625 identity=35055 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=36b6e948-ec12-4fb2-a3d0-c40be035534b] Description:}]" policyAddRequest=136cd79d-2aad-41e1-a32a-07d4dc8ff7af subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=136cd79d-2aad-41e1-a32a-07d4dc8ff7af policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.44 4d6f0d02-04b5-40cc-a435-1ea4a62d1038 default }" containerID=6b50efcbe498567d18681d600b945e3820f7ec8b4abe88b8e227e4caacfa3349 datapathConfiguration="&{false false false false false }" interface=lxcc3418e13e1b6 k8sPodName=local-path-storage/helper-pod-create-pvc-d908d87c-3b4c-43e3-92d1-7cc0365c1af2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b50efcbe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d908d87c-3b4c-43e3-92d1-7cc0365c1af2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b50efcbe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d908d87c-3b4c-43e3-92d1-7cc0365c1af2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b50efcbe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identity=18357 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d908d87c-3b4c-43e3-92d1-7cc0365c1af2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b50efcbe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identity=18357 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d908d87c-3b4c-43e3-92d1-7cc0365c1af2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b50efcbe4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=630 identity=18357 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d908d87c-3b4c-43e3-92d1-7cc0365c1af2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b50efcbe4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=630 identity=18357 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d908d87c-3b4c-43e3-92d1-7cc0365c1af2 subsys=daemon level=info msg="Delete endpoint request" containerID=6b50efcbe4 endpointID=630 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d908d87c-3b4c-43e3-92d1-7cc0365c1af2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6b50efcbe4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=630 identity=18357 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d908d87c-3b4c-43e3-92d1-7cc0365c1af2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 2a5be9ae-af21-455b-8202-8c43a3871440 default }" containerID=fc224fa5e009fd2846f3672abae16841abe6a0200afbbfb45140bb45de845acf datapathConfiguration="&{false false false false false }" interface=lxc5b47ae1cf130 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc224fa5e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc224fa5e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fc224fa5e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=21119 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc224fa5e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=21119 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc224fa5e0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=29 identity=21119 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc224fa5e0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=29 identity=21119 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=e8cdf96b-31c5-492b-909e-405d9f6e7dad] Description:}]" policyAddRequest=2be18590-8585-4adb-868d-845675f41a55 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=2be18590-8585-4adb-868d-845675f41a55 policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 e77e1e9b-00cf-402f-addf-97152e2f92f9 default }" containerID=326d397e2044a942ae1052eba0a0d9e99001cf7910796495e56992cf24156a72 datapathConfiguration="&{false false false false false }" interface=lxc807a0dfb99db k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=326d397e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 ipv4=10.0.0.179 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=326d397e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.179 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=326d397e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 identity=10212 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.179 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=326d397e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 identity=10212 ipv4=10.0.0.179 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=326d397e20 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3342 identity=10212 ipv4=10.0.0.179 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=326d397e20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3342 identity=10212 ipv4=10.0.0.179 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008714677993155411 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.122 30be8c90-cf54-42a0-9d18-f3901f25ba00 default }" containerID=0d10b5a73b1e7b44cbde91d27a3c697980d84f4ecf2a44820033466fa7440dde datapathConfiguration="&{false false false false false }" interface=lxc0d00d7e93b17 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vsgh2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d10b5a73b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vsgh2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d10b5a73b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vsgh2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.53 2de7c85d-14a4-4ba5-989c-694061978922 default }" containerID=2ab79cfa8245308e0be5c25e66a30ba6cecb420762ba544b6f040203eb70145e datapathConfiguration="&{false false false false false }" interface=lxc1376ee553dfa k8sPodName=monitoring/node-feature-discovery-worker-77w9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ab79cfa82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-77w9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ab79cfa82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-77w9s subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d10b5a73b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 identity=12746 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vsgh2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d10b5a73b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 identity=12746 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vsgh2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2ab79cfa82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-77w9s line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ab79cfa82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identity=12977 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-77w9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ab79cfa82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identity=12977 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-77w9s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 2c90dc60-f3f1-418a-becd-cfee6004883d default }" containerID=68048f721afdb3e84d8fbc6d855f00014c7a001027b0f7067f8e1fd4d5fb6ca4 datapathConfiguration="&{false false false false false }" interface=lxc8a5d2bebe938 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7pff7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68048f721a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7pff7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68048f721a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7pff7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68048f721a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identity=6786 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7pff7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68048f721a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identity=6786 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7pff7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d10b5a73b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2896 identity=12746 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vsgh2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d10b5a73b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2896 identity=12746 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vsgh2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2ab79cfa82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3690 identity=12977 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-77w9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ab79cfa82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3690 identity=12977 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-77w9s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=68048f721a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=987 identity=6786 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7pff7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68048f721a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=987 identity=6786 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7pff7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.118 7ffed7c1-7a15-4fcc-97e7-9bee3a7725cb default }" containerID=5c3c850a10e7901857050cb4a26128d505ea43b6a300e76e4bf53a35e842c14e datapathConfiguration="&{false false false false false }" interface=lxc2428b8f03aef k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s242m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c3c850a10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 ipv4=10.0.0.118 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s242m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c3c850a10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.118 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s242m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c3c850a10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=50819 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.118 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s242m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c3c850a10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=50819 ipv4=10.0.0.118 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s242m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5c3c850a10 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=298 identity=50819 ipv4=10.0.0.118 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s242m subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c3c850a10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=298 identity=50819 ipv4=10.0.0.118 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s242m subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1310 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-181-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01310 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01310 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01310 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01310:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1310 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 3b27c8b9-78c1-4285-ad6d-c79ec6796b10 default }" containerID=22d62ac3084aca3a2ee13e2f46bb2da1810006a19e989c5e53270517a169505c datapathConfiguration="&{false false false false false }" interface=lxc28f464068660 k8sPodName=monitoring/kube-prometheus-stack-admission-create-67mlm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22d62ac308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-67mlm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22d62ac308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a1aca2bc-4200-4978-b77c-663ef6c6b459,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a1aca2bc-4200-4978-b77c-663ef6c6b459,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-67mlm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=a1aca2bc-4200-4978-b77c-663ef6c6b459;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=a1aca2bc-4200-4978-b77c-663ef6c6b459;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22d62ac308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identity=22706 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a1aca2bc-4200-4978-b77c-663ef6c6b459,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a1aca2bc-4200-4978-b77c-663ef6c6b459,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-67mlm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22d62ac308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identity=22706 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-67mlm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=22d62ac308 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=224 identity=22706 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-67mlm subsys=endpoint level=info msg="Successful endpoint creation" containerID=22d62ac308 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=224 identity=22706 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-67mlm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=22d62ac308 endpointID=224 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-67mlm subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=a1aca2bc-4200-4978-b77c-663ef6c6b459 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=a1aca2bc-4200-4978-b77c-663ef6c6b459 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=22d62ac308 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=224 identity=22706 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-67mlm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 d8bd709b-7462-40ef-82c8-88b000f2d251 default }" containerID=460243d5f5e55911accf338b5feccc31a1dc7708fe0d843339efcaa27bed5aba datapathConfiguration="&{false false false false false }" interface=lxced6b5991288b k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jwh68 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=460243d5f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3192 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jwh68 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=460243d5f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3192 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jwh68 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=460243d5f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3192 identity=39830 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jwh68 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=460243d5f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3192 identity=39830 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jwh68 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=460243d5f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3192 identity=39830 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jwh68 subsys=endpoint level=info msg="Successful endpoint creation" containerID=460243d5f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3192 identity=39830 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jwh68 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.94 2a5b93cf-e83b-4563-a507-1cdc8a1df104 default }" containerID=818f79fabf54acc2e0bc7eaa7621e98a2737acfe65faa482e3330789a4ff512d datapathConfiguration="&{false false false false false }" interface=lxc0ec24103720c k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kbv7k labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.39 d3ffe6d2-ae37-4332-b90d-308bef3e81ca default }" containerID=79c6b10a00f36de45792cd9dce64eee8ac5c80f946030fb04cd34a1ecf246ce5 datapathConfiguration="&{false false false false false }" interface=lxc1781ab3035d0 k8sPodName=monitoring/kube-prometheus-stack-grafana-bd5b48467-w99lc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=818f79fabf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2188 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kbv7k subsys=endpoint level=info msg="New endpoint" containerID=79c6b10a00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bd5b48467-w99lc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=818f79fabf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2188 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kbv7k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79c6b10a00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bd5b48467-w99lc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=818f79fabf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2188 identity=6223 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kbv7k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=818f79fabf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2188 identity=6223 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kbv7k subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79c6b10a00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=63915 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bd5b48467-w99lc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79c6b10a00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=63915 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bd5b48467-w99lc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=818f79fabf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2188 identity=6223 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kbv7k subsys=endpoint level=info msg="Successful endpoint creation" containerID=818f79fabf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2188 identity=6223 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kbv7k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=79c6b10a00 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=216 identity=63915 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bd5b48467-w99lc subsys=endpoint level=info msg="Successful endpoint creation" containerID=79c6b10a00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=216 identity=63915 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bd5b48467-w99lc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.107 eacb5977-493e-40ee-97dc-1d95a6891a1b default }" containerID=bcc1048b8071c331ebb6d9d9915d35d49cd4d5539ce4b3eb788bfa93dcb98fed datapathConfiguration="&{false false false false false }" interface=lxc9f0a0fe0e4ca k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zp7lp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcc1048b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3878 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zp7lp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcc1048b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3878 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c18cb089-75ea-4dec-9100-88a8af1bc527,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c18cb089-75ea-4dec-9100-88a8af1bc527,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zp7lp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c18cb089-75ea-4dec-9100-88a8af1bc527;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c18cb089-75ea-4dec-9100-88a8af1bc527;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcc1048b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3878 identity=3885 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c18cb089-75ea-4dec-9100-88a8af1bc527,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c18cb089-75ea-4dec-9100-88a8af1bc527,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zp7lp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bcc1048b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3878 identity=3885 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zp7lp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bcc1048b80 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3878 identity=3885 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zp7lp subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcc1048b80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3878 identity=3885 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zp7lp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bcc1048b80 endpointID=3878 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-zp7lp subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c18cb089-75ea-4dec-9100-88a8af1bc527 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c18cb089-75ea-4dec-9100-88a8af1bc527 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=bcc1048b80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3878 identity=3885 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zp7lp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 6320b97d-6afd-49bb-9120-9ce9157312f1 default }" containerID=df4eb3ec94655895a675b92bcc0c39acc01f632fcc5f4a58db18675d44715dd5 datapathConfiguration="&{false false false false false }" interface=lxc31d88fd9679a k8sPodName=local-path-storage/helper-pod-create-pvc-e1416cc3-63a6-4b33-9d7f-0af9af039934 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df4eb3ec94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1416cc3-63a6-4b33-9d7f-0af9af039934 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df4eb3ec94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1416cc3-63a6-4b33-9d7f-0af9af039934 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df4eb3ec94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=18357 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1416cc3-63a6-4b33-9d7f-0af9af039934 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df4eb3ec94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=18357 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1416cc3-63a6-4b33-9d7f-0af9af039934 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df4eb3ec94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=405 identity=18357 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1416cc3-63a6-4b33-9d7f-0af9af039934 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df4eb3ec94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=405 identity=18357 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1416cc3-63a6-4b33-9d7f-0af9af039934 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.193 ee58e57e-4496-4a9f-aebd-f8677696211f default }" containerID=c1883b92fc7d121c764ce2a35005be8221818288445c167f97cd051f58d3b7e9 datapathConfiguration="&{false false false false false }" interface=lxcc5002497e09a k8sPodName=local-path-storage/helper-pod-create-pvc-cdb8204c-e7a5-4afa-a643-f416a94d3f82 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1883b92fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2322 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cdb8204c-e7a5-4afa-a643-f416a94d3f82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1883b92fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2322 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cdb8204c-e7a5-4afa-a643-f416a94d3f82 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c1883b92fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2322 identity=18357 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cdb8204c-e7a5-4afa-a643-f416a94d3f82 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1883b92fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2322 identity=18357 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cdb8204c-e7a5-4afa-a643-f416a94d3f82 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1883b92fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2322 identity=18357 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cdb8204c-e7a5-4afa-a643-f416a94d3f82 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1883b92fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2322 identity=18357 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cdb8204c-e7a5-4afa-a643-f416a94d3f82 subsys=daemon level=info msg="Delete endpoint request" containerID=df4eb3ec94 endpointID=405 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e1416cc3-63a6-4b33-9d7f-0af9af039934 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=df4eb3ec94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=405 identity=18357 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1416cc3-63a6-4b33-9d7f-0af9af039934 subsys=endpoint level=info msg="Delete endpoint request" containerID=c1883b92fc endpointID=2322 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cdb8204c-e7a5-4afa-a643-f416a94d3f82 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c1883b92fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2322 identity=18357 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cdb8204c-e7a5-4afa-a643-f416a94d3f82 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 8a7541cb-9161-4dcf-a948-426ec1818b51 default }" containerID=476a1c7a95cf066aa9f8478a7600f7bcfc0b4555f6a0c13043c49bbbba0af0c5 datapathConfiguration="&{false false false false false }" interface=lxcf2d44b040dbe k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=476a1c7a95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=476a1c7a95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=476a1c7a95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=476a1c7a95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identity=39229 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=476a1c7a95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identity=39229 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=476a1c7a95 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3075 identity=39229 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=476a1c7a95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3075 identity=39229 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.80 7be96c41-7c1f-42a6-b692-29a8c488e3a7 default }" containerID=1969869eb8dfc1ce2e6ca6c5dbb55db4b79194873bdd8dde2e0a8f0dbb3f004e datapathConfiguration="&{false false false false false }" interface=lxc7c5a93252572 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1969869eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1969869eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1969869eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identity=51066 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1969869eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identity=51066 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1969869eb8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=728 identity=51066 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1969869eb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=728 identity=51066 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 5c9c8cf7-5a5f-4a2d-87d6-8d2f944fa211 default }" containerID=53cace56ca742a1e89274ec4b2e922f1a6c44ba7677ed27898b8a14bc806536d datapathConfiguration="&{false false false false false }" interface=lxc0fa7f0192d34 k8sPodName=monitoring/loki-gateway-cf54cb88c-w5f4q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53cace56ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-w5f4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53cace56ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-w5f4q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53cace56ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=3894 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-w5f4q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53cace56ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=3894 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-w5f4q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 f7f72443-941e-4908-b505-bf8e63f00c65 default }" containerID=966cbda90801a283cee4232de8e7dffe9aad584c9008d86954545571ee22a2eb datapathConfiguration="&{false false false false false }" interface=lxc0b29781fcbcc k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=966cbda908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=966cbda908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.176 97bcf90b-01e5-4f87-ad23-0ff2936a37bc default }" containerID=2888fdbf9cc477beccf4c37e951bab4a44b367587322ef60f573623551561902 datapathConfiguration="&{false false false false false }" interface=lxcb4a6ba46f75d k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2888fdbf9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2888fdbf9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=966cbda908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 identity=19054 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=966cbda908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 identity=19054 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2888fdbf9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identity=22123 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2888fdbf9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identity=22123 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53cace56ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1119 identity=3894 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-w5f4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=53cace56ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1119 identity=3894 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-w5f4q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=966cbda908 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2235 identity=19054 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=966cbda908 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2235 identity=19054 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2888fdbf9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2221 identity=22123 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2888fdbf9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2221 identity=22123 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.146 01642061-8791-42b5-9abb-2586f80928c5 default }" containerID=5722474dec4c043d0b75c65bb78f7596537170a8e5e03fcd3a8469af43cb16f9 datapathConfiguration="&{false false false false false }" interface=lxc718c9164a36f k8sPodName=local-path-storage/helper-pod-create-pvc-d8e45134-9abe-467d-ae10-b11bf2c76c1c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5722474dec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d8e45134-9abe-467d-ae10-b11bf2c76c1c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5722474dec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d8e45134-9abe-467d-ae10-b11bf2c76c1c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5722474dec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 identity=18357 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d8e45134-9abe-467d-ae10-b11bf2c76c1c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5722474dec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 identity=18357 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d8e45134-9abe-467d-ae10-b11bf2c76c1c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5722474dec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2599 identity=18357 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d8e45134-9abe-467d-ae10-b11bf2c76c1c subsys=endpoint level=info msg="Successful endpoint creation" containerID=5722474dec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2599 identity=18357 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d8e45134-9abe-467d-ae10-b11bf2c76c1c subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.9 01a69348-3d20-4194-b60b-f74f0c6c3d4a default }" containerID=9dab9cbd1f21ef1c877bf38426a71ede498ebb719423bb43cc6eccf8f06ba47d datapathConfiguration="&{false false false false false }" interface=lxc36f1af36708f k8sPodName=monitoring/vector-dp29p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9dab9cbd1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3171 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/vector-dp29p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9dab9cbd1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3171 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/vector-dp29p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9dab9cbd1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3171 identity=21000 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/vector-dp29p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9dab9cbd1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3171 identity=21000 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/vector-dp29p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9dab9cbd1f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3171 identity=21000 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/vector-dp29p subsys=endpoint level=info msg="Successful endpoint creation" containerID=9dab9cbd1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3171 identity=21000 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/vector-dp29p subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5722474dec endpointID=2599 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d8e45134-9abe-467d-ae10-b11bf2c76c1c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5722474dec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2599 identity=18357 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d8e45134-9abe-467d-ae10-b11bf2c76c1c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 3be22a5d-3bd8-409e-b980-f836a39ed0c1 default }" containerID=47f4779599ad83e1cb60918a24d55f54873283f8ca6eefd35ab5d8b8c6d861ba datapathConfiguration="&{false false false false false }" interface=lxc328b15993545 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47f4779599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47f4779599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=47f4779599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47f4779599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identity=19678 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47f4779599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identity=19678 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47f4779599 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4036 identity=19678 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=47f4779599 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4036 identity=19678 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 d90b6513-f45b-4624-a153-c945e7a17abc default }" containerID=cc07f7c96bf94d5d78588430ba0bb070ffcb7db35fd0fccc5386070c83803b38 datapathConfiguration="&{false false false false false }" interface=lxcb1c3dc89f18e k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-tgb4h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc07f7c96b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-tgb4h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc07f7c96b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-tgb4h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc07f7c96b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identity=25416 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-tgb4h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc07f7c96b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identity=25416 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-tgb4h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cc07f7c96b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2181 identity=25416 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-tgb4h subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc07f7c96b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2181 identity=25416 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-tgb4h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.160 98f98ab3-1616-4d7c-832a-762ba6810fbe default }" containerID=9e4962ef708a92f307feeceeb0d00b75737f3809f601d57474d0410a3484c7de datapathConfiguration="&{false false false false false }" interface=lxcc46acc74c7d1 k8sPodName=openstack/memcached-memcached-6479589586-tprm2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e4962ef70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2928 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tprm2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e4962ef70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2928 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tprm2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9e4962ef70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2928 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tprm2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e4962ef70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2928 identity=56933 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tprm2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e4962ef70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2928 identity=56933 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tprm2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e4962ef70 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2928 identity=56933 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tprm2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e4962ef70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2928 identity=56933 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tprm2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.128 8a5c2963-ee16-4745-8040-4b431527899f default }" containerID=a687982e0f63105fb7112e696aec92403f5911eda73cebfb4471b98dd295b3f2 datapathConfiguration="&{false false false false false }" interface=lxc01b332045770 k8sPodName=local-path-storage/helper-pod-create-pvc-63825afc-b624-435b-bea6-8af4288dfcf9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a687982e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-63825afc-b624-435b-bea6-8af4288dfcf9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a687982e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-63825afc-b624-435b-bea6-8af4288dfcf9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a687982e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=18357 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-63825afc-b624-435b-bea6-8af4288dfcf9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a687982e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=18357 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-63825afc-b624-435b-bea6-8af4288dfcf9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a687982e0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=462 identity=18357 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-63825afc-b624-435b-bea6-8af4288dfcf9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a687982e0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=462 identity=18357 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-63825afc-b624-435b-bea6-8af4288dfcf9 subsys=daemon level=info msg="Delete endpoint request" containerID=a687982e0f endpointID=462 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-63825afc-b624-435b-bea6-8af4288dfcf9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a687982e0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=462 identity=18357 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-63825afc-b624-435b-bea6-8af4288dfcf9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 21e3760a-6884-496e-b484-dc0142de06a1 default }" containerID=80ffe77bd55fab8f0ffe17bfd9fca6af3eb112b79dfc7b5e08abc5d497f54a6a datapathConfiguration="&{false false false false false }" interface=lxce55366b70695 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80ffe77bd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80ffe77bd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80ffe77bd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identity=33114 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=80ffe77bd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identity=33114 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80ffe77bd5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1633 identity=33114 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=80ffe77bd5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1633 identity=33114 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.247 48792b03-769a-4d89-8ba8-5dd7d3d8510b default }" containerID=0871a83ad26c58bc503acf026cc7270bdc2d25841f4de09ef72257883667b477 datapathConfiguration="&{false false false false false }" interface=lxc80463ce64903 k8sPodName=openstack/keystone-api-6b8f6c6b54-vvlv8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0871a83ad2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-api-6b8f6c6b54-vvlv8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0871a83ad2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-api-6b8f6c6b54-vvlv8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0871a83ad2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=2935 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-api-6b8f6c6b54-vvlv8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0871a83ad2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=2935 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-api-6b8f6c6b54-vvlv8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0871a83ad2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=212 identity=2935 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-api-6b8f6c6b54-vvlv8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0871a83ad2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=212 identity=2935 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-api-6b8f6c6b54-vvlv8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.1 45eb7724-4e18-4622-83bc-0066ce0f40e9 default }" containerID=214a4dfb0f59b9beb173e9a9bd1619141f9a744e1c7deab2f408165d4a84ef6f datapathConfiguration="&{false false false false false }" interface=lxc45a57228c020 k8sPodName=openstack/keystone-credential-setup-8tzwc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=214a4dfb0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-credential-setup-8tzwc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=214a4dfb0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f1b30e0b-24b8-4069-a4b5-ae7b71729085,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f1b30e0b-24b8-4069-a4b5-ae7b71729085,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-credential-setup-8tzwc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f1b30e0b-24b8-4069-a4b5-ae7b71729085;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=f1b30e0b-24b8-4069-a4b5-ae7b71729085;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=214a4dfb0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identity=9909 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f1b30e0b-24b8-4069-a4b5-ae7b71729085,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f1b30e0b-24b8-4069-a4b5-ae7b71729085,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-credential-setup-8tzwc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=214a4dfb0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identity=9909 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-credential-setup-8tzwc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=214a4dfb0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=552 identity=9909 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-credential-setup-8tzwc subsys=endpoint level=info msg="Successful endpoint creation" containerID=214a4dfb0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=552 identity=9909 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-credential-setup-8tzwc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=214a4dfb0f endpointID=552 k8sNamespace=openstack k8sPodName=keystone-credential-setup-8tzwc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f1b30e0b-24b8-4069-a4b5-ae7b71729085 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=f1b30e0b-24b8-4069-a4b5-ae7b71729085 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=214a4dfb0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=552 identity=9909 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-credential-setup-8tzwc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 772e866e-05ab-48be-a1d6-ba93e387fc8a default }" containerID=8826088446aefe99b949ff95338c12b0aa56af07adb05acf8847e3724536b91b datapathConfiguration="&{false false false false false }" interface=lxc9c586b5e0fac k8sPodName=openstack/keystone-db-init-4mtcm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8826088446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4mtcm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8826088446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=16133bbb-c395-4f2c-831d-6acccb58e024,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=16133bbb-c395-4f2c-831d-6acccb58e024,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4mtcm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8826088446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4mtcm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=16133bbb-c395-4f2c-831d-6acccb58e024;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=16133bbb-c395-4f2c-831d-6acccb58e024;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8826088446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identity=14703 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=16133bbb-c395-4f2c-831d-6acccb58e024,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=16133bbb-c395-4f2c-831d-6acccb58e024,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4mtcm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8826088446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identity=14703 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4mtcm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8826088446 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1049 identity=14703 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4mtcm subsys=endpoint level=info msg="Successful endpoint creation" containerID=8826088446 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1049 identity=14703 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4mtcm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8826088446 endpointID=1049 k8sNamespace=openstack k8sPodName=keystone-db-init-4mtcm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=16133bbb-c395-4f2c-831d-6acccb58e024 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=16133bbb-c395-4f2c-831d-6acccb58e024 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8826088446 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1049 identity=14703 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4mtcm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 65d39232-66e4-4ebd-9622-736951bbe390 default }" containerID=01f3854628eebddabfbf176f2020e124ddf89f4ba604d94978918863cd77b73a datapathConfiguration="&{false false false false false }" interface=lxc679065459025 k8sPodName=openstack/keystone-fernet-setup-6wvx4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01f3854628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-6wvx4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01f3854628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4f0243b0-144f-4c89-b069-979212a2d6ea,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=4f0243b0-144f-4c89-b069-979212a2d6ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-6wvx4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4f0243b0-144f-4c89-b069-979212a2d6ea;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=4f0243b0-144f-4c89-b069-979212a2d6ea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01f3854628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=35790 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4f0243b0-144f-4c89-b069-979212a2d6ea,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=4f0243b0-144f-4c89-b069-979212a2d6ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-6wvx4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=01f3854628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=35790 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-6wvx4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01f3854628 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=551 identity=35790 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-6wvx4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=01f3854628 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=551 identity=35790 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-6wvx4 subsys=daemon level=info msg="Delete endpoint request" containerID=01f3854628 endpointID=551 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-6wvx4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4f0243b0-144f-4c89-b069-979212a2d6ea k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=4f0243b0-144f-4c89-b069-979212a2d6ea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=01f3854628 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=551 identity=35790 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-6wvx4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 2e08101a-3c72-4a59-80f7-9ce6e2957894 default }" containerID=dabdbb424ea242ae21599a744446ae5c1288a8429e3f025ff5aee7d012bf67eb datapathConfiguration="&{false false false false false }" interface=lxc9d03d020d1de k8sPodName=openstack/keystone-db-sync-lp4jg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dabdbb424e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2992 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-db-sync-lp4jg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dabdbb424e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2992 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=284597f6-46a8-49d5-84a3-fd461727ba5e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=284597f6-46a8-49d5-84a3-fd461727ba5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-db-sync-lp4jg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=284597f6-46a8-49d5-84a3-fd461727ba5e;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=284597f6-46a8-49d5-84a3-fd461727ba5e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dabdbb424e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2992 identity=54013 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=284597f6-46a8-49d5-84a3-fd461727ba5e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=284597f6-46a8-49d5-84a3-fd461727ba5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-db-sync-lp4jg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dabdbb424e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2992 identity=54013 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-db-sync-lp4jg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dabdbb424e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2992 identity=54013 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-db-sync-lp4jg subsys=endpoint level=info msg="Successful endpoint creation" containerID=dabdbb424e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2992 identity=54013 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-db-sync-lp4jg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dabdbb424e endpointID=2992 k8sNamespace=openstack k8sPodName=keystone-db-sync-lp4jg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=284597f6-46a8-49d5-84a3-fd461727ba5e k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=284597f6-46a8-49d5-84a3-fd461727ba5e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=dabdbb424e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2992 identity=54013 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-db-sync-lp4jg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 1413f550-8785-40bb-85d5-fb056d1835fe default }" containerID=fe676699966c299ec49a90e504b79d29ab7e53b9b1b627b7c0ed30934a015514 datapathConfiguration="&{false false false false false }" interface=lxced170465adc2 k8sPodName=openstack/keystone-rabbit-init-6mqpg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe67669996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3878 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-rabbit-init-6mqpg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe67669996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3878 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=75c55f79-6711-44f5-961f-3342727f092a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=75c55f79-6711-44f5-961f-3342727f092a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-rabbit-init-6mqpg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=75c55f79-6711-44f5-961f-3342727f092a;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=75c55f79-6711-44f5-961f-3342727f092a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe67669996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3878 identity=4542 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=75c55f79-6711-44f5-961f-3342727f092a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=75c55f79-6711-44f5-961f-3342727f092a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-rabbit-init-6mqpg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe67669996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3878 identity=4542 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-rabbit-init-6mqpg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fe67669996 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3878 identity=4542 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-rabbit-init-6mqpg subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe67669996 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3878 identity=4542 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-rabbit-init-6mqpg subsys=daemon level=info msg="Delete endpoint request" containerID=fe67669996 endpointID=3878 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-6mqpg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=75c55f79-6711-44f5-961f-3342727f092a k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=75c55f79-6711-44f5-961f-3342727f092a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fe67669996 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3878 identity=4542 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-rabbit-init-6mqpg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 3a36cd8e-d80f-4bb3-86ea-5a3dbec6863b default }" containerID=d24f0f3d6b0a64f58d86076fe50651eb9cb9bf1172951c0691978af57f9c9d24 datapathConfiguration="&{false false false false false }" interface=lxc958d66c081b4 k8sPodName=openstack/keystone-domain-manage-bqzpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d24f0f3d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-bqzpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d24f0f3d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cce3b40e-8619-492c-9f6a-6d7aa424882c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=cce3b40e-8619-492c-9f6a-6d7aa424882c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-bqzpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cce3b40e-8619-492c-9f6a-6d7aa424882c;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=cce3b40e-8619-492c-9f6a-6d7aa424882c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d24f0f3d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 identity=1179 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cce3b40e-8619-492c-9f6a-6d7aa424882c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=cce3b40e-8619-492c-9f6a-6d7aa424882c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-bqzpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d24f0f3d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 identity=1179 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-bqzpv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d24f0f3d6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3257 identity=1179 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-bqzpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=d24f0f3d6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3257 identity=1179 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-bqzpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d24f0f3d6b endpointID=3257 k8sNamespace=openstack k8sPodName=keystone-domain-manage-bqzpv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cce3b40e-8619-492c-9f6a-6d7aa424882c k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=cce3b40e-8619-492c-9f6a-6d7aa424882c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d24f0f3d6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3257 identity=1179 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-bqzpv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 79fc1e65-2b79-4f9f-ad26-b882c5a4df3b default }" containerID=688bf469c65a879b9bba5567a691025423a136000b18ab10dd7bb369b73f8970 datapathConfiguration="&{false false false false false }" interface=lxc8aa2fc27d802 k8sPodName=openstack/keystone-bootstrap-2mfdk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=688bf469c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3022 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-bootstrap-2mfdk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=688bf469c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3022 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=daee6cdb-0eaa-45b4-890e-9e66ef5a2f3e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=daee6cdb-0eaa-45b4-890e-9e66ef5a2f3e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-bootstrap-2mfdk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=daee6cdb-0eaa-45b4-890e-9e66ef5a2f3e;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=daee6cdb-0eaa-45b4-890e-9e66ef5a2f3e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=688bf469c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3022 identity=1109 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=daee6cdb-0eaa-45b4-890e-9e66ef5a2f3e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=daee6cdb-0eaa-45b4-890e-9e66ef5a2f3e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-bootstrap-2mfdk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=688bf469c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3022 identity=1109 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-bootstrap-2mfdk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=688bf469c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3022 identity=1109 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-bootstrap-2mfdk subsys=endpoint level=info msg="Successful endpoint creation" containerID=688bf469c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3022 identity=1109 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-bootstrap-2mfdk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=688bf469c6 endpointID=3022 k8sNamespace=openstack k8sPodName=keystone-bootstrap-2mfdk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=daee6cdb-0eaa-45b4-890e-9e66ef5a2f3e k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=daee6cdb-0eaa-45b4-890e-9e66ef5a2f3e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=688bf469c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3022 identity=1109 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-bootstrap-2mfdk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 94e6e0f1-1e42-4923-abe5-3cd8cfc47635 default }" containerID=79bfedb567cae0ada81f4fc7f0d882908c7b4b15e26daaa52406adf3f38225c1 datapathConfiguration="&{false false false false false }" interface=lxc3c4bb142bf35 k8sPodName=local-path-storage/helper-pod-create-pvc-6ea8dac8-ba29-4e43-afd8-0c59866ac279 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79bfedb567 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ea8dac8-ba29-4e43-afd8-0c59866ac279 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79bfedb567 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ea8dac8-ba29-4e43-afd8-0c59866ac279 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79bfedb567 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=18357 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ea8dac8-ba29-4e43-afd8-0c59866ac279 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79bfedb567 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=18357 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ea8dac8-ba29-4e43-afd8-0c59866ac279 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79bfedb567 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=678 identity=18357 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ea8dac8-ba29-4e43-afd8-0c59866ac279 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79bfedb567 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=678 identity=18357 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ea8dac8-ba29-4e43-afd8-0c59866ac279 subsys=daemon level=info msg="Delete endpoint request" containerID=79bfedb567 endpointID=678 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6ea8dac8-ba29-4e43-afd8-0c59866ac279 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=79bfedb567 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=678 identity=18357 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ea8dac8-ba29-4e43-afd8-0c59866ac279 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 4092fd13-8a42-4724-aae3-580e1eb17521 default }" containerID=ff75edddca658bf9cea312780f5b3678d556e540a7041bf0b9b072387bb832cc datapathConfiguration="&{false false false false false }" interface=lxc10b49f3de277 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff75edddca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff75edddca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff75edddca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identity=62704 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ff75edddca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identity=62704 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff75edddca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1641 identity=62704 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff75edddca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1641 identity=62704 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03423985823853261 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.32 2b4f5412-813b-44c0-847c-7f1af8954e7a default }" containerID=54d419507481bd40d3035a3d9e419c39d3eaebe892e20dc035dec235145a8a11 datapathConfiguration="&{false false false false false }" interface=lxca794f98987be k8sPodName=openstack/barbican-api-cd9756498-727hg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54d4195074 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-api-cd9756498-727hg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54d4195074 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-api-cd9756498-727hg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54d4195074 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identity=18123 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-api-cd9756498-727hg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54d4195074 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identity=18123 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-api-cd9756498-727hg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 83565d25-5089-4c22-bb74-7c786abd3b3f default }" containerID=6e7bd4065379768c6408b105904359e9c696393e9a4e1dc54c4a04d3afbe1a40 datapathConfiguration="&{false false false false false }" interface=lxc7cec90a7277f k8sPodName=openstack/barbican-db-init-kltkx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e7bd40653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-init-kltkx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e7bd40653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5375c7e0-8c8e-475b-b1ac-368722d40186,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=5375c7e0-8c8e-475b-b1ac-368722d40186,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-init-kltkx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5375c7e0-8c8e-475b-b1ac-368722d40186;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=5375c7e0-8c8e-475b-b1ac-368722d40186;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e7bd40653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=24901 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5375c7e0-8c8e-475b-b1ac-368722d40186,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=5375c7e0-8c8e-475b-b1ac-368722d40186,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-init-kltkx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e7bd40653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=24901 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-init-kltkx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54d4195074 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1497 identity=18123 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-api-cd9756498-727hg subsys=endpoint level=info msg="Successful endpoint creation" containerID=54d4195074 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1497 identity=18123 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-api-cd9756498-727hg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6e7bd40653 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=54 identity=24901 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-init-kltkx subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e7bd40653 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=54 identity=24901 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-init-kltkx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e7bd40653 endpointID=54 k8sNamespace=openstack k8sPodName=barbican-db-init-kltkx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5375c7e0-8c8e-475b-b1ac-368722d40186 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=5375c7e0-8c8e-475b-b1ac-368722d40186 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6e7bd40653 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=54 identity=24901 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-init-kltkx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 df2e32cb-7b60-41df-a943-6e16e2f0458c default }" containerID=4f5f4f8acdf8013f3e270b8e08f53b82e9e25fc9145395004887408bb197b5cb datapathConfiguration="&{false false false false false }" interface=lxc127cd4527925 k8sPodName=openstack/barbican-db-sync-7vbjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f5f4f8acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-7vbjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f5f4f8acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f7887f74-5b38-4b12-be6e-219a45e26153,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=f7887f74-5b38-4b12-be6e-219a45e26153,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-7vbjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f7887f74-5b38-4b12-be6e-219a45e26153;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=f7887f74-5b38-4b12-be6e-219a45e26153;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f5f4f8acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identity=10308 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f7887f74-5b38-4b12-be6e-219a45e26153,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=f7887f74-5b38-4b12-be6e-219a45e26153,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-7vbjd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f5f4f8acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identity=10308 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-7vbjd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f5f4f8acd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1614 identity=10308 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-7vbjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f5f4f8acd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1614 identity=10308 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-7vbjd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4f5f4f8acd endpointID=1614 k8sNamespace=openstack k8sPodName=barbican-db-sync-7vbjd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f7887f74-5b38-4b12-be6e-219a45e26153 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=f7887f74-5b38-4b12-be6e-219a45e26153 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4f5f4f8acd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1614 identity=10308 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-7vbjd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 4431362a-d96c-4420-958f-eb4f1d0f3987 default }" containerID=312431be45a07e11514e4733b5169714d1f002b34c4120e032bb3e94b8494dec datapathConfiguration="&{false false false false false }" interface=lxccd9c6a4fe637 k8sPodName=openstack/barbican-rabbit-init-v2s8v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=312431be45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2s8v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=312431be45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4ce87957-4a94-4ca7-a8a5-2315e3ad03ad,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4ce87957-4a94-4ca7-a8a5-2315e3ad03ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2s8v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=312431be45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2s8v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4ce87957-4a94-4ca7-a8a5-2315e3ad03ad;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4ce87957-4a94-4ca7-a8a5-2315e3ad03ad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=312431be45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 identity=867 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4ce87957-4a94-4ca7-a8a5-2315e3ad03ad,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4ce87957-4a94-4ca7-a8a5-2315e3ad03ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2s8v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=312431be45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 identity=867 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2s8v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=312431be45 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1026 identity=867 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2s8v subsys=endpoint level=info msg="Successful endpoint creation" containerID=312431be45 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1026 identity=867 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2s8v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=312431be45 endpointID=1026 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-v2s8v subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4ce87957-4a94-4ca7-a8a5-2315e3ad03ad k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4ce87957-4a94-4ca7-a8a5-2315e3ad03ad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=312431be45 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1026 identity=867 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2s8v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 88bb9451-411b-4ef3-98b0-24aa2044d552 default }" containerID=8b41883578116c3c04c3c5265e840dc1d1e3cee04b73428acf73f9d23599ec92 datapathConfiguration="&{false false false false false }" interface=lxcfa54100f40ba k8sPodName=openstack/barbican-ks-service-jblfk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b41883578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-service-jblfk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b41883578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9d7dc045-2144-4403-af13-1cc5cd8133ef,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=9d7dc045-2144-4403-af13-1cc5cd8133ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-service-jblfk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9d7dc045-2144-4403-af13-1cc5cd8133ef;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=9d7dc045-2144-4403-af13-1cc5cd8133ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b41883578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=64907 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9d7dc045-2144-4403-af13-1cc5cd8133ef,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=9d7dc045-2144-4403-af13-1cc5cd8133ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-service-jblfk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8b41883578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=64907 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-service-jblfk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b41883578 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=106 identity=64907 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-service-jblfk subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b41883578 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=106 identity=64907 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-service-jblfk subsys=daemon level=info msg="Delete endpoint request" containerID=8b41883578 endpointID=106 k8sNamespace=openstack k8sPodName=barbican-ks-service-jblfk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9d7dc045-2144-4403-af13-1cc5cd8133ef k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=9d7dc045-2144-4403-af13-1cc5cd8133ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8b41883578 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=106 identity=64907 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-service-jblfk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 28d3421c-4f29-4cb3-b0fd-5200585bcb13 default }" containerID=85129c922b42804f8be60f3746d8f5f8f59c21f5cf3da9c209b856228bf95ff7 datapathConfiguration="&{false false false false false }" interface=lxc477b201f8b7c k8sPodName=openstack/barbican-ks-endpoints-pnpq6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85129c922b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pnpq6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85129c922b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c0fee301-935f-4603-8207-5967088ff2ed,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c0fee301-935f-4603-8207-5967088ff2ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pnpq6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c0fee301-935f-4603-8207-5967088ff2ed;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c0fee301-935f-4603-8207-5967088ff2ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=85129c922b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identity=4724 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c0fee301-935f-4603-8207-5967088ff2ed,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c0fee301-935f-4603-8207-5967088ff2ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pnpq6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85129c922b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identity=4724 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pnpq6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85129c922b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2728 identity=4724 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pnpq6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=85129c922b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2728 identity=4724 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pnpq6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85129c922b endpointID=2728 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-pnpq6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c0fee301-935f-4603-8207-5967088ff2ed k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c0fee301-935f-4603-8207-5967088ff2ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=85129c922b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2728 identity=4724 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pnpq6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 b61011d5-6f63-480d-93e0-f47a8b0968ee default }" containerID=5aa8b5e3220deeb5950453bf90ed7331441d485347c7e4ee99079af05a5d0549 datapathConfiguration="&{false false false false false }" interface=lxc097b63c05565 k8sPodName=openstack/barbican-ks-user-7qwp6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5aa8b5e322 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1939 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-ks-user-7qwp6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5aa8b5e322 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1939 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fbda7262-5823-4416-b619-fd44a943e52d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=fbda7262-5823-4416-b619-fd44a943e52d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-ks-user-7qwp6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=fbda7262-5823-4416-b619-fd44a943e52d;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=fbda7262-5823-4416-b619-fd44a943e52d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5aa8b5e322 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1939 identity=4523 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fbda7262-5823-4416-b619-fd44a943e52d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=fbda7262-5823-4416-b619-fd44a943e52d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-ks-user-7qwp6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5aa8b5e322 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1939 identity=4523 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-ks-user-7qwp6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5aa8b5e322 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1939 identity=4523 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-ks-user-7qwp6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5aa8b5e322 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1939 identity=4523 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-ks-user-7qwp6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5aa8b5e322 endpointID=1939 k8sNamespace=openstack k8sPodName=barbican-ks-user-7qwp6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=fbda7262-5823-4416-b619-fd44a943e52d k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=fbda7262-5823-4416-b619-fd44a943e52d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5aa8b5e322 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1939 identity=4523 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-ks-user-7qwp6 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.249 86a6a425-e253-4124-bf67-882e550ef19d default }" containerID=a44186230f44939fbcccb6f23f1f842135441f3072dabba29333ee4a29b5af69 datapathConfiguration="&{false false false false false }" interface=lxc183a0d8f41ee k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4vxxk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a44186230f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 ipv4=10.0.0.249 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4vxxk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a44186230f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.249 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4vxxk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a44186230f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=1727 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.249 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4vxxk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a44186230f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=1727 ipv4=10.0.0.249 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4vxxk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a44186230f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=818 identity=1727 ipv4=10.0.0.249 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4vxxk subsys=endpoint level=info msg="Successful endpoint creation" containerID=a44186230f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=818 identity=1727 ipv4=10.0.0.249 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4vxxk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.202 99d5571a-6567-4491-8ee5-3c2015bea7fe default }" containerID=294df014b476bd5b761549ec26c86d2c4183fd97aaee3ab80bc570284c9e17ca datapathConfiguration="&{false false false false false }" interface=lxc471074962e01 k8sPodName=openstack/rook-ceph-detect-version-hjrps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=294df014b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4049 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hjrps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=294df014b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4049 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=0b678127-19d7-432a-a870-800a4c18801c,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=0b678127-19d7-432a-a870-800a4c18801c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hjrps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=0b678127-19d7-432a-a870-800a4c18801c;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=0b678127-19d7-432a-a870-800a4c18801c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=294df014b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4049 identity=3098 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=0b678127-19d7-432a-a870-800a4c18801c,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=0b678127-19d7-432a-a870-800a4c18801c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hjrps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=294df014b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4049 identity=3098 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hjrps subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=294df014b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4049 identity=3098 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hjrps subsys=endpoint level=info msg="Successful endpoint creation" containerID=294df014b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4049 identity=3098 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hjrps subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=294df014b4 endpointID=4049 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-hjrps subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=0b678127-19d7-432a-a870-800a4c18801c k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=0b678127-19d7-432a-a870-800a4c18801c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=294df014b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4049 identity=3098 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hjrps subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 90eabc2a-8dd8-4fad-91b4-16cdb098ce22 default }" containerID=83ff50818e493c655066144c939a417eb5e08e9b99b8647b8df9869f5f59cc78 datapathConfiguration="&{false false false false false }" interface=lxce2282fa9c988 k8sPodName=openstack/ceph-object-controller-detect-version-jllk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83ff50818e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jllk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83ff50818e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=c3655048-62a1-480c-9ef1-253cc8ce07db,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=c3655048-62a1-480c-9ef1-253cc8ce07db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jllk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=83ff50818e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jllk7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=c3655048-62a1-480c-9ef1-253cc8ce07db;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=c3655048-62a1-480c-9ef1-253cc8ce07db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83ff50818e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identity=26842 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=c3655048-62a1-480c-9ef1-253cc8ce07db,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=c3655048-62a1-480c-9ef1-253cc8ce07db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jllk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83ff50818e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identity=26842 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jllk7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83ff50818e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=189 identity=26842 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jllk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=83ff50818e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=189 identity=26842 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jllk7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=83ff50818e endpointID=189 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-jllk7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=c3655048-62a1-480c-9ef1-253cc8ce07db k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=c3655048-62a1-480c-9ef1-253cc8ce07db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=83ff50818e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=189 identity=26842 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jllk7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 e4bc0c48-b90b-4b9f-8af2-e4bcb9c11d69 default }" containerID=3392616c93549e37867ffe4247e5219b81fd7da2291cd7f0e1181383374827a3 datapathConfiguration="&{false false false false false }" interface=lxce60915b2f4b1 k8sPodName=local-path-storage/helper-pod-create-pvc-4be2eae3-3129-49af-9377-881e849b4fab labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3392616c93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4be2eae3-3129-49af-9377-881e849b4fab subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3392616c93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4be2eae3-3129-49af-9377-881e849b4fab subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3392616c93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identity=18357 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4be2eae3-3129-49af-9377-881e849b4fab oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3392616c93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identity=18357 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4be2eae3-3129-49af-9377-881e849b4fab subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3392616c93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2279 identity=18357 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4be2eae3-3129-49af-9377-881e849b4fab subsys=endpoint level=info msg="Successful endpoint creation" containerID=3392616c93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2279 identity=18357 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4be2eae3-3129-49af-9377-881e849b4fab subsys=daemon level=info msg="Delete endpoint request" containerID=3392616c93 endpointID=2279 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4be2eae3-3129-49af-9377-881e849b4fab subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3392616c93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2279 identity=18357 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4be2eae3-3129-49af-9377-881e849b4fab subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 3d64af16-b51f-46a0-b8d1-ed301ba0b279 default }" containerID=23dfc044be8d2ca64ee62b83ea8e358c615040a3ff51977215efaa49cf029c8c datapathConfiguration="&{false false false false false }" interface=lxc1172e65c962a k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23dfc044be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23dfc044be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23dfc044be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identity=2216 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23dfc044be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identity=2216 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23dfc044be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3947 identity=2216 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23dfc044be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3947 identity=2216 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.21 8ef0374f-44f0-42e4-b4a7-bdfeaa01df2f default }" containerID=023f17a6d0e8c969ae7e0edcad5415dbb0189d8924a9ae3ac530f32a207549ee datapathConfiguration="&{false false false false false }" interface=lxcf8bb4b173105 k8sPodName=openstack/glance-db-init-k89tn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=023f17a6d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-db-init-k89tn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=023f17a6d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9690f338-3ea0-4b4f-9041-99ffb34b9bb5,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9690f338-3ea0-4b4f-9041-99ffb34b9bb5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-db-init-k89tn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9690f338-3ea0-4b4f-9041-99ffb34b9bb5;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=9690f338-3ea0-4b4f-9041-99ffb34b9bb5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=023f17a6d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identity=12958 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9690f338-3ea0-4b4f-9041-99ffb34b9bb5,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9690f338-3ea0-4b4f-9041-99ffb34b9bb5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-db-init-k89tn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=023f17a6d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identity=12958 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-db-init-k89tn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=023f17a6d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1531 identity=12958 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-db-init-k89tn subsys=endpoint level=info msg="Successful endpoint creation" containerID=023f17a6d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1531 identity=12958 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-db-init-k89tn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.194 ae5bf4eb-9d63-4d3b-b204-876ef11e2290 default }" containerID=1b5c55fa914ce9c67ff6ca888c76c5b40d9b3240978763cd5ed32b58ccfb90a8 datapathConfiguration="&{false false false false false }" interface=lxcd1ee0d86c76f k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fhcwd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b5c55fa91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fhcwd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b5c55fa91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fhcwd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b5c55fa91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identity=47684 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fhcwd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1b5c55fa91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identity=47684 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fhcwd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 0ae920e0-2da1-4f7c-a30c-f9c898eab389 default }" containerID=325b2a7b45e095f14bc5c17303c0c5feebc02683fd3a50819292d0efe34cc15e datapathConfiguration="&{false false false false false }" interface=lxce13c2e99efda k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-fzvqd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=325b2a7b45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-fzvqd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=325b2a7b45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-fzvqd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=325b2a7b45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identity=22011 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-fzvqd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=325b2a7b45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identity=22011 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-fzvqd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b5c55fa91 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=930 identity=47684 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fhcwd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b5c55fa91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=930 identity=47684 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fhcwd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=325b2a7b45 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1454 identity=22011 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-fzvqd subsys=endpoint level=info msg="Successful endpoint creation" containerID=325b2a7b45 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1454 identity=22011 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-fzvqd subsys=daemon level=info msg="Delete endpoint request" containerID=023f17a6d0 endpointID=1531 k8sNamespace=openstack k8sPodName=glance-db-init-k89tn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9690f338-3ea0-4b4f-9041-99ffb34b9bb5 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=9690f338-3ea0-4b4f-9041-99ffb34b9bb5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=023f17a6d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1531 identity=12958 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-db-init-k89tn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.169 a669763d-57ed-4e2f-a5ef-f1217654fdf3 default }" containerID=2fc28eb72cdaf2654414af52adba9705889c484828fda2484c41cf4a63fe2a47 datapathConfiguration="&{false false false false false }" interface=lxcede64c73a9cd k8sPodName=openstack/glance-db-sync-92dz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fc28eb72c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-db-sync-92dz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fc28eb72c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8d61c75f-a88c-43dc-a640-a01caad93549,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=8d61c75f-a88c-43dc-a640-a01caad93549,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-db-sync-92dz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8d61c75f-a88c-43dc-a640-a01caad93549;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=8d61c75f-a88c-43dc-a640-a01caad93549;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fc28eb72c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identity=5374 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8d61c75f-a88c-43dc-a640-a01caad93549,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=8d61c75f-a88c-43dc-a640-a01caad93549,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-db-sync-92dz9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fc28eb72c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identity=5374 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-db-sync-92dz9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fc28eb72c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1377 identity=5374 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-db-sync-92dz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fc28eb72c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1377 identity=5374 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-db-sync-92dz9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2fc28eb72c endpointID=1377 k8sNamespace=openstack k8sPodName=glance-db-sync-92dz9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8d61c75f-a88c-43dc-a640-a01caad93549 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=8d61c75f-a88c-43dc-a640-a01caad93549 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2fc28eb72c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1377 identity=5374 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-db-sync-92dz9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 a2e9a5d2-ef8e-45a3-bf42-b9d4e6421970 default }" containerID=a5601da7f7ee260876eb0f75a4dd8884de7b7e55b4d23c00b7fb08b20c2c555e datapathConfiguration="&{false false false false false }" interface=lxc77f12d3038a8 k8sPodName=openstack/glance-rabbit-init-zz6kw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5601da7f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-zz6kw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5601da7f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=afbcb85e-cf11-4040-8655-2cf37f9e0a60,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=afbcb85e-cf11-4040-8655-2cf37f9e0a60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-zz6kw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a5601da7f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-zz6kw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=afbcb85e-cf11-4040-8655-2cf37f9e0a60;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=afbcb85e-cf11-4040-8655-2cf37f9e0a60;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5601da7f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identity=7806 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=afbcb85e-cf11-4040-8655-2cf37f9e0a60,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=afbcb85e-cf11-4040-8655-2cf37f9e0a60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-zz6kw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5601da7f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identity=7806 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-zz6kw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5601da7f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1306 identity=7806 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-zz6kw subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5601da7f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1306 identity=7806 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-zz6kw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a5601da7f7 endpointID=1306 k8sNamespace=openstack k8sPodName=glance-rabbit-init-zz6kw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=afbcb85e-cf11-4040-8655-2cf37f9e0a60 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=afbcb85e-cf11-4040-8655-2cf37f9e0a60 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a5601da7f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1306 identity=7806 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-zz6kw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 8b822056-e804-497a-9ad2-0f3e9406bdd5 default }" containerID=3ba74b84ba9d59c6579cd2e5f426fcd78e054fdc7c67526f5989952a64ca1c96 datapathConfiguration="&{false false false false false }" interface=lxc864e578573a4 k8sPodName=openstack/glance-ks-service-ghqbf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ba74b84ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-service-ghqbf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ba74b84ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bd04aeec-76e9-47a0-b9b7-ae8a69ac6d5a,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=bd04aeec-76e9-47a0-b9b7-ae8a69ac6d5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-service-ghqbf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bd04aeec-76e9-47a0-b9b7-ae8a69ac6d5a;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=bd04aeec-76e9-47a0-b9b7-ae8a69ac6d5a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ba74b84ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identity=652 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bd04aeec-76e9-47a0-b9b7-ae8a69ac6d5a,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=bd04aeec-76e9-47a0-b9b7-ae8a69ac6d5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-service-ghqbf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ba74b84ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identity=652 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-service-ghqbf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3ba74b84ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3001 identity=652 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-service-ghqbf subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ba74b84ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3001 identity=652 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-service-ghqbf subsys=daemon level=info msg="Delete endpoint request" containerID=3ba74b84ba endpointID=3001 k8sNamespace=openstack k8sPodName=glance-ks-service-ghqbf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bd04aeec-76e9-47a0-b9b7-ae8a69ac6d5a k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=bd04aeec-76e9-47a0-b9b7-ae8a69ac6d5a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3ba74b84ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3001 identity=652 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-service-ghqbf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 88a7b0d9-1765-4c7e-be4b-11cc2b04237f default }" containerID=1a3b9a7d6068809ae3d2d4d470ea6f4e80f5420da2f07399ac3bdd171d83c528 datapathConfiguration="&{false false false false false }" interface=lxcf97e8531da3e k8sPodName=openstack/glance-ks-endpoints-lpx4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a3b9a7d60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3767 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-lpx4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a3b9a7d60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3767 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8b6c14a0-faf3-4609-8f5b-b843d268b463,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8b6c14a0-faf3-4609-8f5b-b843d268b463,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-lpx4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1a3b9a7d60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3767 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-lpx4r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8b6c14a0-faf3-4609-8f5b-b843d268b463;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=8b6c14a0-faf3-4609-8f5b-b843d268b463;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a3b9a7d60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3767 identity=10066 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8b6c14a0-faf3-4609-8f5b-b843d268b463,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8b6c14a0-faf3-4609-8f5b-b843d268b463,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-lpx4r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a3b9a7d60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3767 identity=10066 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-lpx4r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a3b9a7d60 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3767 identity=10066 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-lpx4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a3b9a7d60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3767 identity=10066 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-lpx4r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1a3b9a7d60 endpointID=3767 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-lpx4r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8b6c14a0-faf3-4609-8f5b-b843d268b463 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=8b6c14a0-faf3-4609-8f5b-b843d268b463 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1a3b9a7d60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3767 identity=10066 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-lpx4r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 b3818ee6-0a4e-4977-8042-f10bcb36bc64 default }" containerID=1d093dcb7fd1239a2eb55c4701ada6e5b02c83a9a217310b94ae03d1fe25e8f9 datapathConfiguration="&{false false false false false }" interface=lxcce44fa86395a k8sPodName=openstack/glance-ks-user-fjk5v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d093dcb7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-fjk5v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d093dcb7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ba80e7bf-1ac6-4450-aaea-36cf4f14bd27,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=ba80e7bf-1ac6-4450-aaea-36cf4f14bd27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-fjk5v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1d093dcb7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-fjk5v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ba80e7bf-1ac6-4450-aaea-36cf4f14bd27;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=ba80e7bf-1ac6-4450-aaea-36cf4f14bd27;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d093dcb7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identity=28113 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ba80e7bf-1ac6-4450-aaea-36cf4f14bd27,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=ba80e7bf-1ac6-4450-aaea-36cf4f14bd27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-fjk5v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d093dcb7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identity=28113 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-fjk5v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d093dcb7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1111 identity=28113 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-fjk5v subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d093dcb7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1111 identity=28113 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-fjk5v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1d093dcb7f endpointID=1111 k8sNamespace=openstack k8sPodName=glance-ks-user-fjk5v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ba80e7bf-1ac6-4450-aaea-36cf4f14bd27 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=ba80e7bf-1ac6-4450-aaea-36cf4f14bd27 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1d093dcb7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1111 identity=28113 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-fjk5v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 f581a11d-e59e-4a63-b1a6-bdb44c4942c0 default }" containerID=484077f128a9c36d093a3aac5e1c646560706382f1104dd22293b4136868167d datapathConfiguration="&{false false false false false }" interface=lxc6bd462ee93bf k8sPodName=openstack/glance-metadefs-load-mqfmk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=484077f128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-metadefs-load-mqfmk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=484077f128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c4f015b7-1230-45c6-af06-6879b50f88b1,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c4f015b7-1230-45c6-af06-6879b50f88b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-metadefs-load-mqfmk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=484077f128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-metadefs-load-mqfmk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c4f015b7-1230-45c6-af06-6879b50f88b1;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=c4f015b7-1230-45c6-af06-6879b50f88b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=484077f128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=24434 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c4f015b7-1230-45c6-af06-6879b50f88b1,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c4f015b7-1230-45c6-af06-6879b50f88b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-metadefs-load-mqfmk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=484077f128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=24434 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-metadefs-load-mqfmk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=484077f128 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1151 identity=24434 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-metadefs-load-mqfmk subsys=endpoint level=info msg="Successful endpoint creation" containerID=484077f128 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1151 identity=24434 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-metadefs-load-mqfmk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=484077f128 endpointID=1151 k8sNamespace=openstack k8sPodName=glance-metadefs-load-mqfmk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c4f015b7-1230-45c6-af06-6879b50f88b1 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=c4f015b7-1230-45c6-af06-6879b50f88b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=484077f128 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1151 identity=24434 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-metadefs-load-mqfmk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 230068d3-bedb-4695-a2bd-0e00960fc872 default }" containerID=ee208b370dd0dd590a714760f94cc28c2272073472e5483fcd25adac51c22416 datapathConfiguration="&{false false false false false }" interface=lxcdebfa24a8c5b k8sPodName=openstack/glance-storage-init-h9v7j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee208b370d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-h9v7j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee208b370d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a3120a41-e840-4dca-8ecb-e141777977e1,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a3120a41-e840-4dca-8ecb-e141777977e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-h9v7j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a3120a41-e840-4dca-8ecb-e141777977e1;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=a3120a41-e840-4dca-8ecb-e141777977e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee208b370d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identity=54731 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a3120a41-e840-4dca-8ecb-e141777977e1,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a3120a41-e840-4dca-8ecb-e141777977e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-h9v7j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee208b370d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identity=54731 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-h9v7j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee208b370d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2737 identity=54731 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-h9v7j subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee208b370d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2737 identity=54731 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-h9v7j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee208b370d endpointID=2737 k8sNamespace=openstack k8sPodName=glance-storage-init-h9v7j subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a3120a41-e840-4dca-8ecb-e141777977e1 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=a3120a41-e840-4dca-8ecb-e141777977e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ee208b370d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2737 identity=54731 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-storage-init-h9v7j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 acd1d5a5-cc8a-4ca3-8c86-b66f1f8db749 default }" containerID=84b909f6068076a5b4b78d1dbefba63e40ac5ceec524cbd1d524bc173618d14c datapathConfiguration="&{false false false false false }" interface=lxc5d9c9b1c1823 k8sPodName=openstack/glance-api-6554775499-xhx6l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84b909f606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-api-6554775499-xhx6l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84b909f606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-api-6554775499-xhx6l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=84b909f606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-api-6554775499-xhx6l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84b909f606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=42143 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-api-6554775499-xhx6l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84b909f606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=42143 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-api-6554775499-xhx6l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84b909f606 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2189 identity=42143 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-api-6554775499-xhx6l subsys=endpoint level=info msg="Successful endpoint creation" containerID=84b909f606 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2189 identity=42143 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-api-6554775499-xhx6l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.162 18c31a8c-4a38-4e87-bedf-9b7bbe399ec4 default }" containerID=feb51cb5a83d4216945be212b77195454a0aecebd789cd992ee0d2be50edc278 datapathConfiguration="&{false false false false false }" interface=lxcbae92978b79f k8sPodName=openstack/staffeln-conductor-cb7789467-wqgnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=feb51cb5a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-conductor-cb7789467-wqgnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=feb51cb5a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-conductor-cb7789467-wqgnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=feb51cb5a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-conductor-cb7789467-wqgnb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=feb51cb5a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identity=41013 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-conductor-cb7789467-wqgnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=feb51cb5a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identity=41013 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-conductor-cb7789467-wqgnb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 8a8a04c1-f970-4f9e-842b-c11486754be3 default }" containerID=824506ec4002ff2261e339a4928a11827f698a931f0953b4737cd59b35438dfd datapathConfiguration="&{false false false false false }" interface=lxc01229800c23c k8sPodName=openstack/staffeln-api-7f6fbccbd4-slnh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=824506ec40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7f6fbccbd4-slnh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=824506ec40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7f6fbccbd4-slnh9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=824506ec40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=3387 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7f6fbccbd4-slnh9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=824506ec40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=3387 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7f6fbccbd4-slnh9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 8dcb38dc-89e4-4895-917f-0dfa93414bc2 default }" containerID=de6efac442b58dbdf171c9b43b0f3871a0b7681c2dd11609db874e75e1b0f8e9 datapathConfiguration="&{false false false false false }" interface=lxc362ac9b7f223 k8sPodName=openstack/staffeln-db-init-2g79c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de6efac442 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/staffeln-db-init-2g79c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de6efac442 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1e528296-70ae-45d9-b86c-5e03475ac2a7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1e528296-70ae-45d9-b86c-5e03475ac2a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/staffeln-db-init-2g79c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=1e528296-70ae-45d9-b86c-5e03475ac2a7;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=1e528296-70ae-45d9-b86c-5e03475ac2a7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de6efac442 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=16470 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1e528296-70ae-45d9-b86c-5e03475ac2a7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1e528296-70ae-45d9-b86c-5e03475ac2a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/staffeln-db-init-2g79c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de6efac442 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=16470 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/staffeln-db-init-2g79c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=feb51cb5a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=949 identity=41013 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-conductor-cb7789467-wqgnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=feb51cb5a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=949 identity=41013 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-conductor-cb7789467-wqgnb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=824506ec40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=348 identity=3387 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7f6fbccbd4-slnh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=824506ec40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=348 identity=3387 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7f6fbccbd4-slnh9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=de6efac442 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1316 identity=16470 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/staffeln-db-init-2g79c subsys=endpoint level=info msg="Successful endpoint creation" containerID=de6efac442 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1316 identity=16470 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/staffeln-db-init-2g79c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de6efac442 endpointID=1316 k8sNamespace=openstack k8sPodName=staffeln-db-init-2g79c subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=1e528296-70ae-45d9-b86c-5e03475ac2a7 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=1e528296-70ae-45d9-b86c-5e03475ac2a7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=de6efac442 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1316 identity=16470 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/staffeln-db-init-2g79c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 1c9a587f-c00e-46e4-a6c7-0a4e360afad7 default }" containerID=30d784a1ac0e070db10942d9b50b07ff55eb1671bb242bfe041dfee4bca07fb5 datapathConfiguration="&{false false false false false }" interface=lxc57cda8341b81 k8sPodName=openstack/staffeln-db-sync-qb5l4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30d784a1ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-sync-qb5l4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30d784a1ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6f7d5403-11f7-49b1-bd2e-2b32db52009f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=6f7d5403-11f7-49b1-bd2e-2b32db52009f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-sync-qb5l4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=6f7d5403-11f7-49b1-bd2e-2b32db52009f;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=6f7d5403-11f7-49b1-bd2e-2b32db52009f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30d784a1ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 identity=5780 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6f7d5403-11f7-49b1-bd2e-2b32db52009f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=6f7d5403-11f7-49b1-bd2e-2b32db52009f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-sync-qb5l4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30d784a1ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 identity=5780 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-sync-qb5l4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30d784a1ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2964 identity=5780 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-sync-qb5l4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=30d784a1ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2964 identity=5780 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-sync-qb5l4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=30d784a1ac endpointID=2964 k8sNamespace=openstack k8sPodName=staffeln-db-sync-qb5l4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=6f7d5403-11f7-49b1-bd2e-2b32db52009f k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=6f7d5403-11f7-49b1-bd2e-2b32db52009f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=30d784a1ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2964 identity=5780 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/staffeln-db-sync-qb5l4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 a978c9eb-9801-4699-9df8-4347f55d465b default }" containerID=82aa5b366601ae377319af1b2920d0d30a45726f6ef9b2e71d7eab6315cec218 datapathConfiguration="&{false false false false false }" interface=lxcb544ccec38b0 k8sPodName=local-path-storage/helper-pod-create-pvc-001afc53-3e2b-4c05-8fca-8e1376b501b3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82aa5b3666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-001afc53-3e2b-4c05-8fca-8e1376b501b3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82aa5b3666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-001afc53-3e2b-4c05-8fca-8e1376b501b3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82aa5b3666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identity=18357 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-001afc53-3e2b-4c05-8fca-8e1376b501b3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82aa5b3666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identity=18357 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-001afc53-3e2b-4c05-8fca-8e1376b501b3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82aa5b3666 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1665 identity=18357 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-001afc53-3e2b-4c05-8fca-8e1376b501b3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=82aa5b3666 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1665 identity=18357 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-001afc53-3e2b-4c05-8fca-8e1376b501b3 subsys=daemon level=info msg="Delete endpoint request" containerID=82aa5b3666 endpointID=1665 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-001afc53-3e2b-4c05-8fca-8e1376b501b3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=82aa5b3666 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1665 identity=18357 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-001afc53-3e2b-4c05-8fca-8e1376b501b3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 b6e60d92-6d71-4c3c-93f9-76d586c29e2d default }" containerID=1e07c12b9861c1e4a1bbedadeb157178b34956c244acb002b0828e2d92a73dfe datapathConfiguration="&{false false false false false }" interface=lxc5a7c00c5b71b k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e07c12b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e07c12b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e07c12b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identity=36450 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1e07c12b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identity=36450 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e07c12b98 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=414 identity=36450 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e07c12b98 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=414 identity=36450 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 5e3b7517-dc77-4b07-89b4-a0e016709e88 default }" containerID=f47bf9f1dbc167510d36f0ca11543a0412709f451355c3607c6ea8b1b56f0b46 datapathConfiguration="&{false false false false false }" interface=lxc503838129054 k8sPodName=openstack/cinder-api-74b799cfb9-grpwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f47bf9f1db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3983 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-api-74b799cfb9-grpwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f47bf9f1db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3983 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-api-74b799cfb9-grpwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f47bf9f1db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3983 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-api-74b799cfb9-grpwh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f47bf9f1db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3983 identity=12228 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-api-74b799cfb9-grpwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f47bf9f1db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3983 identity=12228 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-api-74b799cfb9-grpwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 9747265c-046b-4977-93b9-84d4dfc8680f default }" containerID=27a34673d7dd9615e3cc83212adf1c7c80cffeedecc928e9005791e6a6a3c280 datapathConfiguration="&{false false false false false }" interface=lxcf3ca63b98748 k8sPodName=openstack/cinder-scheduler-cd7bd869f-k6drm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27a34673d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3019 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-scheduler-cd7bd869f-k6drm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27a34673d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3019 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-scheduler-cd7bd869f-k6drm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27a34673d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3019 identity=61693 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-scheduler-cd7bd869f-k6drm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27a34673d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3019 identity=61693 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-scheduler-cd7bd869f-k6drm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 59a84d4d-0857-4c59-89fb-e32bea273b2b default }" containerID=0aaa92f0b07fc2bd19637ce1d37e4045bdda24d1fe30c3cbfb01fa27f0e15c89 datapathConfiguration="&{false false false false false }" interface=lxc12cc34e0c817 k8sPodName=openstack/cinder-db-init-92zbw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0aaa92f0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1966 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-db-init-92zbw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0aaa92f0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1966 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=101e4f0a-9c1e-4510-bdd4-eef6e0059d3b,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=101e4f0a-9c1e-4510-bdd4-eef6e0059d3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-db-init-92zbw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=101e4f0a-9c1e-4510-bdd4-eef6e0059d3b;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=101e4f0a-9c1e-4510-bdd4-eef6e0059d3b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0aaa92f0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1966 identity=28290 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=101e4f0a-9c1e-4510-bdd4-eef6e0059d3b,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=101e4f0a-9c1e-4510-bdd4-eef6e0059d3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-db-init-92zbw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0aaa92f0b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1966 identity=28290 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-db-init-92zbw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f47bf9f1db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3983 identity=12228 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-api-74b799cfb9-grpwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=f47bf9f1db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3983 identity=12228 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-api-74b799cfb9-grpwh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=27a34673d7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3019 identity=61693 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-scheduler-cd7bd869f-k6drm subsys=endpoint level=info msg="Successful endpoint creation" containerID=27a34673d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3019 identity=61693 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-scheduler-cd7bd869f-k6drm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0aaa92f0b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1966 identity=28290 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-db-init-92zbw subsys=endpoint level=info msg="Successful endpoint creation" containerID=0aaa92f0b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1966 identity=28290 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-db-init-92zbw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0aaa92f0b0 endpointID=1966 k8sNamespace=openstack k8sPodName=cinder-db-init-92zbw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=101e4f0a-9c1e-4510-bdd4-eef6e0059d3b k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=101e4f0a-9c1e-4510-bdd4-eef6e0059d3b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0aaa92f0b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1966 identity=28290 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-db-init-92zbw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 9d277369-cd5c-4aaf-a0b3-83ef2e98d291 default }" containerID=55e238a3242b70dd1a3bffa9ee9f58a1fade49f42b77245c81a8f1773f3758c3 datapathConfiguration="&{false false false false false }" interface=lxc551dd6c836e7 k8sPodName=openstack/cinder-db-sync-gh7tj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55e238a324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=147 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-db-sync-gh7tj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55e238a324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=147 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f3119e5e-26b4-451a-a6d1-55c5810be4bf,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=f3119e5e-26b4-451a-a6d1-55c5810be4bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-db-sync-gh7tj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=f3119e5e-26b4-451a-a6d1-55c5810be4bf;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=f3119e5e-26b4-451a-a6d1-55c5810be4bf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55e238a324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=147 identity=43742 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f3119e5e-26b4-451a-a6d1-55c5810be4bf,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=f3119e5e-26b4-451a-a6d1-55c5810be4bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-db-sync-gh7tj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=55e238a324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=147 identity=43742 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-db-sync-gh7tj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55e238a324 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=147 identity=43742 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-db-sync-gh7tj subsys=endpoint level=info msg="Successful endpoint creation" containerID=55e238a324 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=147 identity=43742 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-db-sync-gh7tj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=55e238a324 endpointID=147 k8sNamespace=openstack k8sPodName=cinder-db-sync-gh7tj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=f3119e5e-26b4-451a-a6d1-55c5810be4bf k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=f3119e5e-26b4-451a-a6d1-55c5810be4bf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=55e238a324 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=147 identity=43742 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-db-sync-gh7tj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 e043ff37-ecfb-4691-ad4f-8ced4aa3591d default }" containerID=aefc8fe030fb7bc4fa05cebec1c8fb873b85ffe1a4cafdf723a809d760cc1263 datapathConfiguration="&{false false false false false }" interface=lxc8a702d05ca74 k8sPodName=openstack/cinder-rabbit-init-7npwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aefc8fe030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-rabbit-init-7npwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aefc8fe030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a67679b1-c31d-4c33-8e1c-3deb9538062a,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a67679b1-c31d-4c33-8e1c-3deb9538062a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-rabbit-init-7npwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a67679b1-c31d-4c33-8e1c-3deb9538062a;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a67679b1-c31d-4c33-8e1c-3deb9538062a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=aefc8fe030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-rabbit-init-7npwh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=aefc8fe030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 identity=26829 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a67679b1-c31d-4c33-8e1c-3deb9538062a,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a67679b1-c31d-4c33-8e1c-3deb9538062a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-rabbit-init-7npwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aefc8fe030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 identity=26829 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-rabbit-init-7npwh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aefc8fe030 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2105 identity=26829 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-rabbit-init-7npwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=aefc8fe030 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2105 identity=26829 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-rabbit-init-7npwh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aefc8fe030 endpointID=2105 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-7npwh subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a67679b1-c31d-4c33-8e1c-3deb9538062a k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a67679b1-c31d-4c33-8e1c-3deb9538062a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=aefc8fe030 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2105 identity=26829 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/cinder-rabbit-init-7npwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 45213e27-12bb-40f6-bc9e-1edf3a5d9db9 default }" containerID=4fe54ca54f50d72795e53f7ecb0b2aa1fa0cb4a567ae57c71c0e50d099fc29a8 datapathConfiguration="&{false false false false false }" interface=lxc648250a48e9f k8sPodName=openstack/cinder-ks-service-g5hlw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fe54ca54f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-g5hlw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fe54ca54f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a0522f70-96ef-4d3e-ae11-c2f98773daf4,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=a0522f70-96ef-4d3e-ae11-c2f98773daf4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-g5hlw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4fe54ca54f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-g5hlw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a0522f70-96ef-4d3e-ae11-c2f98773daf4;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=a0522f70-96ef-4d3e-ae11-c2f98773daf4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fe54ca54f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identity=13549 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a0522f70-96ef-4d3e-ae11-c2f98773daf4,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=a0522f70-96ef-4d3e-ae11-c2f98773daf4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-g5hlw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fe54ca54f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identity=13549 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-g5hlw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fe54ca54f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=477 identity=13549 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-g5hlw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fe54ca54f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=477 identity=13549 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-g5hlw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4fe54ca54f endpointID=477 k8sNamespace=openstack k8sPodName=cinder-ks-service-g5hlw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a0522f70-96ef-4d3e-ae11-c2f98773daf4 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=a0522f70-96ef-4d3e-ae11-c2f98773daf4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4fe54ca54f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=477 identity=13549 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-g5hlw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 d0a111be-0d57-4f9a-880e-a52b2da91698 default }" containerID=f23ba3c688ea06ba3a792ca8fcbe0cc2e156b181ba8cdfc1bce6716979955267 datapathConfiguration="&{false false false false false }" interface=lxca4ce8018130c k8sPodName=openstack/cinder-ks-endpoints-vwrq4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f23ba3c688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-endpoints-vwrq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f23ba3c688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9dcb824f-0b62-44b0-a6f5-54e93ece9601,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9dcb824f-0b62-44b0-a6f5-54e93ece9601,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-endpoints-vwrq4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9dcb824f-0b62-44b0-a6f5-54e93ece9601;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=9dcb824f-0b62-44b0-a6f5-54e93ece9601;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f23ba3c688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=6854 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9dcb824f-0b62-44b0-a6f5-54e93ece9601,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9dcb824f-0b62-44b0-a6f5-54e93ece9601,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-endpoints-vwrq4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f23ba3c688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=6854 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-endpoints-vwrq4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f23ba3c688 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=157 identity=6854 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-endpoints-vwrq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f23ba3c688 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=157 identity=6854 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-endpoints-vwrq4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f23ba3c688 endpointID=157 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-vwrq4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9dcb824f-0b62-44b0-a6f5-54e93ece9601 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=9dcb824f-0b62-44b0-a6f5-54e93ece9601 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f23ba3c688 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=157 identity=6854 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-endpoints-vwrq4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 eb7e1b52-c111-4e2d-aa4e-3a87acaddb7e default }" containerID=5966312afb61325c905b3b416edc415329966233e53243c598d51abc9bef5d69 datapathConfiguration="&{false false false false false }" interface=lxc9fa5bc944bda k8sPodName=openstack/cinder-ks-user-n566s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5966312afb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-ks-user-n566s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5966312afb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=19f5c6b7-066e-4a54-8625-f0c16bfb4764,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=19f5c6b7-066e-4a54-8625-f0c16bfb4764,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-ks-user-n566s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=19f5c6b7-066e-4a54-8625-f0c16bfb4764;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=19f5c6b7-066e-4a54-8625-f0c16bfb4764;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5966312afb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identity=11039 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=19f5c6b7-066e-4a54-8625-f0c16bfb4764,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=19f5c6b7-066e-4a54-8625-f0c16bfb4764,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-ks-user-n566s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5966312afb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identity=11039 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-ks-user-n566s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5966312afb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1651 identity=11039 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-ks-user-n566s subsys=endpoint level=info msg="Successful endpoint creation" containerID=5966312afb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1651 identity=11039 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-ks-user-n566s subsys=daemon level=info msg="Delete endpoint request" containerID=5966312afb endpointID=1651 k8sNamespace=openstack k8sPodName=cinder-ks-user-n566s subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=19f5c6b7-066e-4a54-8625-f0c16bfb4764 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=19f5c6b7-066e-4a54-8625-f0c16bfb4764 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=5966312afb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1651 identity=11039 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-ks-user-n566s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 3f92290b-93a5-4621-9adf-193ec661335b default }" containerID=9ec6e9f61fe695489e961d985c990fdf4c1567f3252f091b03d0e13acce094a7 datapathConfiguration="&{false false false false false }" interface=lxc45614aa3d55b k8sPodName=openstack/cinder-backup-storage-init-pmvg7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ec6e9f61f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pmvg7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ec6e9f61f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e17c4fd7-2d74-495a-993c-09cce55f6264,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=e17c4fd7-2d74-495a-993c-09cce55f6264,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pmvg7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9ec6e9f61f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pmvg7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e17c4fd7-2d74-495a-993c-09cce55f6264;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=e17c4fd7-2d74-495a-993c-09cce55f6264;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ec6e9f61f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identity=11593 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e17c4fd7-2d74-495a-993c-09cce55f6264,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=e17c4fd7-2d74-495a-993c-09cce55f6264,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pmvg7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ec6e9f61f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identity=11593 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pmvg7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ec6e9f61f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3196 identity=11593 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pmvg7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ec6e9f61f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3196 identity=11593 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pmvg7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9ec6e9f61f endpointID=3196 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-pmvg7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e17c4fd7-2d74-495a-993c-09cce55f6264 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=e17c4fd7-2d74-495a-993c-09cce55f6264 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9ec6e9f61f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3196 identity=11593 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pmvg7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 3efdc417-2b92-436f-b2c0-fad83231c887 default }" containerID=2db2ca05dec9b01056ac58f18cdc903f911365dfcb94439dec3ac92198c0e9e2 datapathConfiguration="&{false false false false false }" interface=lxc96ba205f47af k8sPodName=openstack/cinder-create-internal-tenant-28wr2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2db2ca05de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1336 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-28wr2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2db2ca05de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1336 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=16954b20-d4f3-4cf1-8faf-aa451b055240,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=16954b20-d4f3-4cf1-8faf-aa451b055240,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-28wr2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=16954b20-d4f3-4cf1-8faf-aa451b055240;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=16954b20-d4f3-4cf1-8faf-aa451b055240;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2db2ca05de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1336 identity=49420 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=16954b20-d4f3-4cf1-8faf-aa451b055240,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=16954b20-d4f3-4cf1-8faf-aa451b055240,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-28wr2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2db2ca05de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1336 identity=49420 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-28wr2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2db2ca05de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1336 identity=49420 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-28wr2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2db2ca05de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1336 identity=49420 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-28wr2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2db2ca05de endpointID=1336 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-28wr2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=16954b20-d4f3-4cf1-8faf-aa451b055240 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=16954b20-d4f3-4cf1-8faf-aa451b055240 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=2db2ca05de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1336 identity=49420 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-28wr2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 0b1ebc10-fe66-4b58-8d50-8bb185849656 default }" containerID=cbeb9f58280cda20d6f448ef7a72a9611fe1bf4932ed016efb99977da4fcfa50 datapathConfiguration="&{false false false false false }" interface=lxcdb92c0bf118a k8sPodName=openstack/cinder-storage-init-k9vs9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbeb9f5828 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-storage-init-k9vs9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbeb9f5828 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=47523c85-ce9e-49ed-887e-52b6bf4ce45b,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=47523c85-ce9e-49ed-887e-52b6bf4ce45b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-storage-init-k9vs9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=47523c85-ce9e-49ed-887e-52b6bf4ce45b;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=47523c85-ce9e-49ed-887e-52b6bf4ce45b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbeb9f5828 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 identity=21121 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=47523c85-ce9e-49ed-887e-52b6bf4ce45b,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=47523c85-ce9e-49ed-887e-52b6bf4ce45b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-storage-init-k9vs9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cbeb9f5828 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 identity=21121 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-storage-init-k9vs9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cbeb9f5828 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1064 identity=21121 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-storage-init-k9vs9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbeb9f5828 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1064 identity=21121 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-storage-init-k9vs9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cbeb9f5828 endpointID=1064 k8sNamespace=openstack k8sPodName=cinder-storage-init-k9vs9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=47523c85-ce9e-49ed-887e-52b6bf4ce45b k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=47523c85-ce9e-49ed-887e-52b6bf4ce45b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=cbeb9f5828 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1064 identity=21121 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-storage-init-k9vs9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 80315f1e-3f49-4b06-99d1-32eaf6de8e33 default }" containerID=9351736a3dbdffb899a22d391190ce40af60675a6942e6961cf6ce975bd452d5 datapathConfiguration="&{false false false false false }" interface=lxc221196f822a8 k8sPodName=openstack/cinder-bootstrap-5d97h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9351736a3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3651 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-bootstrap-5d97h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9351736a3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3651 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=38f4a29a-d490-4faa-ad08-a930702e68d0,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=38f4a29a-d490-4faa-ad08-a930702e68d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-bootstrap-5d97h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9351736a3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3651 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-bootstrap-5d97h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=38f4a29a-d490-4faa-ad08-a930702e68d0;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=38f4a29a-d490-4faa-ad08-a930702e68d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9351736a3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3651 identity=6437 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=38f4a29a-d490-4faa-ad08-a930702e68d0,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=38f4a29a-d490-4faa-ad08-a930702e68d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-bootstrap-5d97h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9351736a3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3651 identity=6437 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-bootstrap-5d97h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9351736a3d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3651 identity=6437 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-bootstrap-5d97h subsys=endpoint level=info msg="Successful endpoint creation" containerID=9351736a3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3651 identity=6437 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-bootstrap-5d97h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 32666e33-3f24-4510-9610-e457cfacc935 default }" containerID=8452f671f549fa0830f51a102468c1ab37ba133854a4b37b69d76cac7ea31170 datapathConfiguration="&{false false false false false }" interface=lxc4f388aa4b5c6 k8sPodName=openstack/cinder-backup-64ccbdb59-t7n9n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8452f671f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-backup-64ccbdb59-t7n9n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8452f671f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-backup-64ccbdb59-t7n9n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8452f671f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-backup-64ccbdb59-t7n9n line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8452f671f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identity=24452 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-backup-64ccbdb59-t7n9n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8452f671f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identity=24452 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-backup-64ccbdb59-t7n9n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 7c2a2655-d922-4122-9e83-22771df3c2e4 default }" containerID=ed23ea9e7ac9f183d217781d45686d38f0a4103cca18dca546ddf6b340076340 datapathConfiguration="&{false false false false false }" interface=lxc64d30d3de407 k8sPodName=openstack/cinder-volume-756d86f454-sdql8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed23ea9e7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/cinder-volume-756d86f454-sdql8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed23ea9e7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/cinder-volume-756d86f454-sdql8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed23ea9e7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identity=361 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/cinder-volume-756d86f454-sdql8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed23ea9e7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identity=361 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/cinder-volume-756d86f454-sdql8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8452f671f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2931 identity=24452 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-backup-64ccbdb59-t7n9n subsys=endpoint level=info msg="Successful endpoint creation" containerID=8452f671f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2931 identity=24452 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-backup-64ccbdb59-t7n9n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ed23ea9e7a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1042 identity=361 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/cinder-volume-756d86f454-sdql8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed23ea9e7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1042 identity=361 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/cinder-volume-756d86f454-sdql8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9351736a3d endpointID=3651 k8sNamespace=openstack k8sPodName=cinder-bootstrap-5d97h subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=38f4a29a-d490-4faa-ad08-a930702e68d0 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=38f4a29a-d490-4faa-ad08-a930702e68d0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9351736a3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3651 identity=6437 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-bootstrap-5d97h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 211159df-5017-4ed9-a002-ed8307ec1781 default }" containerID=f74748028e306959991af7d84fe2006a1c2ee92ecb4cd5b2938316f8e3b7722b datapathConfiguration="&{false false false false false }" interface=lxc7b0a0898c3bd k8sPodName=openstack/placement-api-569795b4d6-qh7ln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f74748028e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-api-569795b4d6-qh7ln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f74748028e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-api-569795b4d6-qh7ln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f74748028e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=32699 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-api-569795b4d6-qh7ln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f74748028e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=32699 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-api-569795b4d6-qh7ln subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 20229552-7831-4680-b458-73e3674f835a default }" containerID=295adb00f807ee2086d755e6aca984f6cd63eb74055e63c319295a919bfc00b9 datapathConfiguration="&{false false false false false }" interface=lxcc1e48958d4b6 k8sPodName=openstack/placement-db-init-w2wml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=295adb00f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=799 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/placement-db-init-w2wml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=295adb00f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=799 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=48a1303b-2821-4d6f-8f95-19126fd4ee45,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=48a1303b-2821-4d6f-8f95-19126fd4ee45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/placement-db-init-w2wml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=48a1303b-2821-4d6f-8f95-19126fd4ee45;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=48a1303b-2821-4d6f-8f95-19126fd4ee45;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=295adb00f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=799 identity=16071 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=48a1303b-2821-4d6f-8f95-19126fd4ee45,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=48a1303b-2821-4d6f-8f95-19126fd4ee45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/placement-db-init-w2wml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=295adb00f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=799 identity=16071 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/placement-db-init-w2wml subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f74748028e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1289 identity=32699 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-api-569795b4d6-qh7ln subsys=endpoint level=info msg="Successful endpoint creation" containerID=f74748028e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1289 identity=32699 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-api-569795b4d6-qh7ln subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=295adb00f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=799 identity=16071 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/placement-db-init-w2wml subsys=endpoint level=info msg="Successful endpoint creation" containerID=295adb00f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=799 identity=16071 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/placement-db-init-w2wml subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=295adb00f8 endpointID=799 k8sNamespace=openstack k8sPodName=placement-db-init-w2wml subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=48a1303b-2821-4d6f-8f95-19126fd4ee45 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=48a1303b-2821-4d6f-8f95-19126fd4ee45 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=295adb00f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=799 identity=16071 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/placement-db-init-w2wml subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 319b27a2-9e5f-40c8-83fc-a6fee3888562 default }" containerID=d045ed62f02aa1fcb7a4c37dc9f421eee12bf2f867d76e26258a7177b67e7d94 datapathConfiguration="&{false false false false false }" interface=lxcb845267a0e9d k8sPodName=openstack/placement-db-sync-jhxfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d045ed62f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/placement-db-sync-jhxfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d045ed62f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=8732db45-0808-4cc1-a396-6e0b91478e7c,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=8732db45-0808-4cc1-a396-6e0b91478e7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/placement-db-sync-jhxfh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=8732db45-0808-4cc1-a396-6e0b91478e7c;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=8732db45-0808-4cc1-a396-6e0b91478e7c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d045ed62f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identity=16287 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=8732db45-0808-4cc1-a396-6e0b91478e7c,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=8732db45-0808-4cc1-a396-6e0b91478e7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/placement-db-sync-jhxfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d045ed62f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identity=16287 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/placement-db-sync-jhxfh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d045ed62f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=20 identity=16287 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/placement-db-sync-jhxfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=d045ed62f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=20 identity=16287 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/placement-db-sync-jhxfh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d045ed62f0 endpointID=20 k8sNamespace=openstack k8sPodName=placement-db-sync-jhxfh subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=8732db45-0808-4cc1-a396-6e0b91478e7c k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=8732db45-0808-4cc1-a396-6e0b91478e7c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=d045ed62f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=20 identity=16287 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/placement-db-sync-jhxfh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 3af8ceb6-b81a-4fbe-9892-52c178a22c02 default }" containerID=0dd6354264ec413556dc542caf3d335f85fcb29a6e2c01047e5ec0c0f5a38e85 datapathConfiguration="&{false false false false false }" interface=lxca9a98e06ceee k8sPodName=openstack/placement-ks-service-xqgpq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0dd6354264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/placement-ks-service-xqgpq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0dd6354264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ea3e510f-3016-40c5-8cb1-e3314b041881,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=ea3e510f-3016-40c5-8cb1-e3314b041881,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/placement-ks-service-xqgpq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=ea3e510f-3016-40c5-8cb1-e3314b041881;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=ea3e510f-3016-40c5-8cb1-e3314b041881;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0dd6354264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 identity=5402 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ea3e510f-3016-40c5-8cb1-e3314b041881,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=ea3e510f-3016-40c5-8cb1-e3314b041881,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/placement-ks-service-xqgpq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0dd6354264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 identity=5402 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/placement-ks-service-xqgpq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0dd6354264 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1883 identity=5402 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/placement-ks-service-xqgpq subsys=endpoint level=info msg="Successful endpoint creation" containerID=0dd6354264 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1883 identity=5402 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/placement-ks-service-xqgpq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0dd6354264 endpointID=1883 k8sNamespace=openstack k8sPodName=placement-ks-service-xqgpq subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=ea3e510f-3016-40c5-8cb1-e3314b041881 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=ea3e510f-3016-40c5-8cb1-e3314b041881 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=0dd6354264 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1883 identity=5402 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/placement-ks-service-xqgpq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 69adf625-bc34-49bc-b2c1-73ba40c9316b default }" containerID=8ab6f8639876ea33712da873bc58cd154b2b14331c38d7ddb0f3e224e765feaf datapathConfiguration="&{false false false false false }" interface=lxc6e7972020a3e k8sPodName=openstack/placement-ks-user-2bxgd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ab6f86398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2760 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-user-2bxgd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ab6f86398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2760 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3ef15b52-9fc9-4aad-aaed-7c1295cc924e,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=3ef15b52-9fc9-4aad-aaed-7c1295cc924e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-user-2bxgd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=3ef15b52-9fc9-4aad-aaed-7c1295cc924e;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=3ef15b52-9fc9-4aad-aaed-7c1295cc924e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ab6f86398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2760 identity=22739 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3ef15b52-9fc9-4aad-aaed-7c1295cc924e,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=3ef15b52-9fc9-4aad-aaed-7c1295cc924e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-user-2bxgd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ab6f86398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2760 identity=22739 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-user-2bxgd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8ab6f86398 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2760 identity=22739 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-user-2bxgd subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ab6f86398 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2760 identity=22739 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-user-2bxgd subsys=daemon level=info msg="Delete endpoint request" containerID=8ab6f86398 endpointID=2760 k8sNamespace=openstack k8sPodName=placement-ks-user-2bxgd subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=3ef15b52-9fc9-4aad-aaed-7c1295cc924e k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=3ef15b52-9fc9-4aad-aaed-7c1295cc924e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=8ab6f86398 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2760 identity=22739 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-user-2bxgd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 5a891953-fa22-4326-aca6-15dc23517e1a default }" containerID=700986da413c30f3405ac51e17987fc4966eb786d4f59b4893b90b5119729145 datapathConfiguration="&{false false false false false }" interface=lxc345cb65fcf6b k8sPodName=openstack/placement-ks-endpoints-9gsms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=700986da41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3954 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-ks-endpoints-9gsms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=700986da41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3954 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=0dafc8ef-5e66-493b-b9d2-73a2a7d3ac75,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0dafc8ef-5e66-493b-b9d2-73a2a7d3ac75,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-ks-endpoints-9gsms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=0dafc8ef-5e66-493b-b9d2-73a2a7d3ac75;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0dafc8ef-5e66-493b-b9d2-73a2a7d3ac75;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=700986da41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3954 identity=57752 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=0dafc8ef-5e66-493b-b9d2-73a2a7d3ac75,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0dafc8ef-5e66-493b-b9d2-73a2a7d3ac75,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-ks-endpoints-9gsms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=700986da41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3954 identity=57752 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-ks-endpoints-9gsms subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=700986da41 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3954 identity=57752 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-ks-endpoints-9gsms subsys=endpoint level=info msg="Successful endpoint creation" containerID=700986da41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3954 identity=57752 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-ks-endpoints-9gsms subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=700986da41 endpointID=3954 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-9gsms subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=0dafc8ef-5e66-493b-b9d2-73a2a7d3ac75 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0dafc8ef-5e66-493b-b9d2-73a2a7d3ac75 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=700986da41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3954 identity=57752 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-ks-endpoints-9gsms subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 59b31118-1eeb-4671-9b1d-1c3ff6454f1f default }" containerID=cbae50972730676295a1e17d59f76fc248cf05b1600a5d47abc8810a8769d710 datapathConfiguration="&{false false false false false }" interface=lxcc5e739c61bdc k8sPodName=openstack/neutron-coredns-7dd4958666-ksxjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbae509727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1160 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-ksxjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbae509727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1160 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-ksxjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cbae509727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1160 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-ksxjd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbae509727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1160 identity=5542 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-ksxjd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbae509727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1160 identity=5542 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-ksxjd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cbae509727 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1160 identity=5542 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-ksxjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbae509727 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1160 identity=5542 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-ksxjd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.198 2b4b4ddc-63a3-4783-9ca3-a793c86a73dc default }" containerID=f253ba5080e2fc3f8138f1e510c626596ece059413ad0418cc8096c577c5d234 datapathConfiguration="&{false false false false false }" interface=lxcce31a6f55687 k8sPodName=local-path-storage/helper-pod-create-pvc-0fe3bfe4-64d8-49f5-aac2-f51f1c588e46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f253ba5080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fe3bfe4-64d8-49f5-aac2-f51f1c588e46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f253ba5080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fe3bfe4-64d8-49f5-aac2-f51f1c588e46 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f253ba5080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identity=18357 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fe3bfe4-64d8-49f5-aac2-f51f1c588e46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f253ba5080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identity=18357 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fe3bfe4-64d8-49f5-aac2-f51f1c588e46 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f253ba5080 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=125 identity=18357 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fe3bfe4-64d8-49f5-aac2-f51f1c588e46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f253ba5080 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=125 identity=18357 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fe3bfe4-64d8-49f5-aac2-f51f1c588e46 subsys=daemon level=info msg="Delete endpoint request" containerID=f253ba5080 endpointID=125 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0fe3bfe4-64d8-49f5-aac2-f51f1c588e46 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f253ba5080 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=125 identity=18357 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fe3bfe4-64d8-49f5-aac2-f51f1c588e46 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 299905df-33d7-4656-89a4-39cf38a50852 default }" containerID=50da2e142eb1e0464ac6c9d391d35809d2462e3b20693b2307bc07377de79721 datapathConfiguration="&{false false false false false }" interface=lxc08389ef64a58 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50da2e142e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2782 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50da2e142e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2782 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50da2e142e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2782 identity=24346 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50da2e142e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2782 identity=24346 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50da2e142e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2782 identity=24346 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=50da2e142e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2782 identity=24346 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 fdc03d19-6b0c-4029-978e-8990e007e4d5 default }" containerID=cb3cf71afa0e6e1bb686556ee7ff4a536d313e0ab60f15648b75438d0c9ab9e9 datapathConfiguration="&{false false false false false }" interface=lxc09b8ea0d78ec k8sPodName=openstack/nova-api-osapi-756f74b4cd-2pqrm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb3cf71afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/nova-api-osapi-756f74b4cd-2pqrm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb3cf71afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/nova-api-osapi-756f74b4cd-2pqrm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb3cf71afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identity=21498 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/nova-api-osapi-756f74b4cd-2pqrm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb3cf71afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identity=21498 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/nova-api-osapi-756f74b4cd-2pqrm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.143 f48a3746-4e29-4994-a710-147625fb5bf9 default }" containerID=c26cac46e10e5ccb4bcafac6aa1b47df4194d4963d0fec74763be3f82b90627c datapathConfiguration="&{false false false false false }" interface=lxc9a7067d5c70b k8sPodName=openstack/nova-scheduler-796dbc8658-9ftwk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c26cac46e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-scheduler-796dbc8658-9ftwk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c26cac46e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-scheduler-796dbc8658-9ftwk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.192 4cad0a0c-736a-4455-aeb7-1f961fde1f1b default }" containerID=add00eee033f0b3cdf2d2fa4b5abe3a5298ac0c50ad992e6bb45d508a9395e57 datapathConfiguration="&{false false false false false }" interface=lxc0bc9d5a1e4b3 k8sPodName=openstack/nova-bootstrap-9z6w2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=add00eee03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-bootstrap-9z6w2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=add00eee03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=cc0e666d-6677-4363-9d1f-81e049eabd56,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=cc0e666d-6677-4363-9d1f-81e049eabd56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-bootstrap-9z6w2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 a8c64af4-b44f-463c-a89d-c4c99f71767f default }" containerID=0b6ec65ec77f8c75bed6832256bd603734cb398c6ef7d427bb647174a44749c6 datapathConfiguration="&{false false false false false }" interface=lxc5adbd95ae168 k8sPodName=openstack/nova-api-metadata-6c8cd77b7d-b42sj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b6ec65ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/nova-api-metadata-6c8cd77b7d-b42sj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b6ec65ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/nova-api-metadata-6c8cd77b7d-b42sj subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c26cac46e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 identity=19774 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-scheduler-796dbc8658-9ftwk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c26cac46e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 identity=19774 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-scheduler-796dbc8658-9ftwk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=cc0e666d-6677-4363-9d1f-81e049eabd56;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=cc0e666d-6677-4363-9d1f-81e049eabd56;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=add00eee03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=8520 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=cc0e666d-6677-4363-9d1f-81e049eabd56,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=cc0e666d-6677-4363-9d1f-81e049eabd56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-bootstrap-9z6w2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=add00eee03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=8520 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-bootstrap-9z6w2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b6ec65ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=35971 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/nova-api-metadata-6c8cd77b7d-b42sj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b6ec65ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=35971 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/nova-api-metadata-6c8cd77b7d-b42sj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 a0a2eefd-22fd-45d2-a25c-be3b05bf8581 default }" containerID=b36a41bf4cbc14a1a9247cc7a6309af86a7495d7b294e6dcbc7dead73a2c1646 datapathConfiguration="&{false false false false false }" interface=lxcabd8c7f609e0 k8sPodName=openstack/nova-cell-setup-qfvnm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b36a41bf4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2830 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-cell-setup-qfvnm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b36a41bf4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2830 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1bff8e0b-44b9-4239-8fdb-477a3a3544a1,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=1bff8e0b-44b9-4239-8fdb-477a3a3544a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-cell-setup-qfvnm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.216 31c3bec8-4acf-42e4-9a5b-d9272100a5dd default }" containerID=0ac6409e88f863c2d4bbd2272edfa1099acfe4fda98b7fd7b944c60df8fae92b datapathConfiguration="&{false false false false false }" interface=lxca1beaac04eef k8sPodName=openstack/nova-db-init-824fn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ac6409e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-init-824fn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb3cf71afa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1128 identity=21498 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/nova-api-osapi-756f74b4cd-2pqrm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ac6409e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=387ea4ce-9393-48e9-8ddb-1ae7f0455e33,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=387ea4ce-9393-48e9-8ddb-1ae7f0455e33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-init-824fn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 10e27daa-ce70-4e21-8bfe-5898d40c93b1 default }" containerID=b5069fd4befc3c8a2bd0c830a9acd9de04824f32934d7e77d545b4875052b53d datapathConfiguration="&{false false false false false }" interface=lxc2297d9cdc032 k8sPodName=openstack/nova-conductor-6ff9459978-cpcwg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5069fd4be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2900 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/nova-conductor-6ff9459978-cpcwg subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb3cf71afa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1128 identity=21498 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/nova-api-osapi-756f74b4cd-2pqrm subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID=b5069fd4be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2900 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/nova-conductor-6ff9459978-cpcwg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c26cac46e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3389 identity=19774 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-scheduler-796dbc8658-9ftwk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c26cac46e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3389 identity=19774 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-scheduler-796dbc8658-9ftwk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 89522f32-1c99-4a78-8907-f4c0fc9e44ab default }" containerID=c7d3e06848e11c8fa362cfb7dd6e5214fc4ac5d9369291d6b7961f8e3ea4b8df datapathConfiguration="&{false false false false false }" interface=lxc4ba80a6e9c35 k8sPodName=openstack/nova-novncproxy-758f5c48df-72nzk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7d3e06848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-novncproxy-758f5c48df-72nzk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7d3e06848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-novncproxy-758f5c48df-72nzk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=add00eee03 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=192 identity=8520 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-bootstrap-9z6w2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=add00eee03 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=8520 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-bootstrap-9z6w2 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=1bff8e0b-44b9-4239-8fdb-477a3a3544a1;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=1bff8e0b-44b9-4239-8fdb-477a3a3544a1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=b36a41bf4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2830 identity=10898 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1bff8e0b-44b9-4239-8fdb-477a3a3544a1,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=1bff8e0b-44b9-4239-8fdb-477a3a3544a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-cell-setup-qfvnm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b36a41bf4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2830 identity=10898 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-cell-setup-qfvnm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b6ec65ec7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=506 identity=35971 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/nova-api-metadata-6c8cd77b7d-b42sj subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b6ec65ec7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=506 identity=35971 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/nova-api-metadata-6c8cd77b7d-b42sj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b36a41bf4c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2830 identity=10898 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-cell-setup-qfvnm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b36a41bf4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2830 identity=10898 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-cell-setup-qfvnm subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=387ea4ce-9393-48e9-8ddb-1ae7f0455e33;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=387ea4ce-9393-48e9-8ddb-1ae7f0455e33;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ac6409e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identity=45323 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=387ea4ce-9393-48e9-8ddb-1ae7f0455e33,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=387ea4ce-9393-48e9-8ddb-1ae7f0455e33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-init-824fn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ac6409e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identity=45323 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-init-824fn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=0ac6409e88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1655 identity=45323 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-init-824fn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ac6409e88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1655 identity=45323 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-init-824fn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b5069fd4be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2900 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=openstack/nova-conductor-6ff9459978-cpcwg line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=c7d3e06848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-novncproxy-758f5c48df-72nzk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5069fd4be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2900 identity=7348 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/nova-conductor-6ff9459978-cpcwg oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=b5069fd4be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2900 identity=7348 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/nova-conductor-6ff9459978-cpcwg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5069fd4be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2900 identity=7348 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/nova-conductor-6ff9459978-cpcwg subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5069fd4be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2900 identity=7348 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/nova-conductor-6ff9459978-cpcwg subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7d3e06848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identity=1772 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-novncproxy-758f5c48df-72nzk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7d3e06848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identity=1772 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-novncproxy-758f5c48df-72nzk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7d3e06848 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=746 identity=1772 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-novncproxy-758f5c48df-72nzk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7d3e06848 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=746 identity=1772 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-novncproxy-758f5c48df-72nzk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ac6409e88 endpointID=1655 k8sNamespace=openstack k8sPodName=nova-db-init-824fn subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=387ea4ce-9393-48e9-8ddb-1ae7f0455e33 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=387ea4ce-9393-48e9-8ddb-1ae7f0455e33 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=0ac6409e88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1655 identity=45323 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-init-824fn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 61b2097d-0b79-4cc2-93c9-3b9c517d55af default }" containerID=5607d4ec071d1bfd040a92c41d85969cd20e70e8517e65e388349fd9e964ff67 datapathConfiguration="&{false false false false false }" interface=lxc5937facba3ce k8sPodName=openstack/nova-db-sync-52qk8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5607d4ec07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-db-sync-52qk8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5607d4ec07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=bc9a5d5b-3079-49eb-b0a5-f59d7840223f,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=bc9a5d5b-3079-49eb-b0a5-f59d7840223f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-db-sync-52qk8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=bc9a5d5b-3079-49eb-b0a5-f59d7840223f;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=bc9a5d5b-3079-49eb-b0a5-f59d7840223f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5607d4ec07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=64441 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=bc9a5d5b-3079-49eb-b0a5-f59d7840223f,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=bc9a5d5b-3079-49eb-b0a5-f59d7840223f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-db-sync-52qk8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5607d4ec07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=64441 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-db-sync-52qk8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5607d4ec07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=500 identity=64441 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-db-sync-52qk8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5607d4ec07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=500 identity=64441 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-db-sync-52qk8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5607d4ec07 endpointID=500 k8sNamespace=openstack k8sPodName=nova-db-sync-52qk8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=bc9a5d5b-3079-49eb-b0a5-f59d7840223f k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=bc9a5d5b-3079-49eb-b0a5-f59d7840223f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=5607d4ec07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=500 identity=64441 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-db-sync-52qk8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 c3a65fdd-2b16-43ff-84ad-5b894e7ec243 default }" containerID=7c204554f09273a4802ff964dc149f33c4152bf898725caaf210ed28881ac6b2 datapathConfiguration="&{false false false false false }" interface=lxcd7e93ab26a2a k8sPodName=openstack/nova-rabbit-init-tjwj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c204554f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-rabbit-init-tjwj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c204554f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c8f4315a-ea4f-4ab9-9810-c9708ec36363,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c8f4315a-ea4f-4ab9-9810-c9708ec36363,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-rabbit-init-tjwj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=c8f4315a-ea4f-4ab9-9810-c9708ec36363;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c8f4315a-ea4f-4ab9-9810-c9708ec36363;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c204554f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identity=10241 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c8f4315a-ea4f-4ab9-9810-c9708ec36363,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c8f4315a-ea4f-4ab9-9810-c9708ec36363,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-rabbit-init-tjwj6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7c204554f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identity=10241 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-rabbit-init-tjwj6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c204554f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=954 identity=10241 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-rabbit-init-tjwj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c204554f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=954 identity=10241 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-rabbit-init-tjwj6 subsys=daemon level=info msg="Delete endpoint request" containerID=7c204554f0 endpointID=954 k8sNamespace=openstack k8sPodName=nova-rabbit-init-tjwj6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=c8f4315a-ea4f-4ab9-9810-c9708ec36363 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c8f4315a-ea4f-4ab9-9810-c9708ec36363 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=7c204554f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=954 identity=10241 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/nova-rabbit-init-tjwj6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 88101feb-a762-46e5-b4a9-fa150d3ec79e default }" containerID=900e98a4c4e06e6bd17813c73153627d610311624c6d168256145590ac8d2436 datapathConfiguration="&{false false false false false }" interface=lxc563ddf94d1c1 k8sPodName=openstack/nova-ks-service-69qkn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=900e98a4c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/nova-ks-service-69qkn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=900e98a4c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c5ca997d-9e40-4b4e-adad-41c86ea2ea20,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=c5ca997d-9e40-4b4e-adad-41c86ea2ea20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/nova-ks-service-69qkn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=c5ca997d-9e40-4b4e-adad-41c86ea2ea20;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=c5ca997d-9e40-4b4e-adad-41c86ea2ea20;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=900e98a4c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 identity=6524 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c5ca997d-9e40-4b4e-adad-41c86ea2ea20,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=c5ca997d-9e40-4b4e-adad-41c86ea2ea20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/nova-ks-service-69qkn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=900e98a4c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 identity=6524 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/nova-ks-service-69qkn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=900e98a4c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1736 identity=6524 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/nova-ks-service-69qkn subsys=endpoint level=info msg="Successful endpoint creation" containerID=900e98a4c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1736 identity=6524 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/nova-ks-service-69qkn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=900e98a4c4 endpointID=1736 k8sNamespace=openstack k8sPodName=nova-ks-service-69qkn subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=c5ca997d-9e40-4b4e-adad-41c86ea2ea20 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=c5ca997d-9e40-4b4e-adad-41c86ea2ea20 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=900e98a4c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1736 identity=6524 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/nova-ks-service-69qkn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 7aac8a45-8199-427e-9ca3-e684a105593e default }" containerID=592b5b7118d3d7683cc6459eb262a52b3ab90faea421df069e28fb4b999ab6c0 datapathConfiguration="&{false false false false false }" interface=lxc12db938a956f k8sPodName=openstack/nova-ks-endpoints-qjkhf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=592b5b7118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/nova-ks-endpoints-qjkhf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=592b5b7118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=cb27c16d-9937-40a0-98f6-19201e569dc3,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cb27c16d-9937-40a0-98f6-19201e569dc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/nova-ks-endpoints-qjkhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=cb27c16d-9937-40a0-98f6-19201e569dc3;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=cb27c16d-9937-40a0-98f6-19201e569dc3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=592b5b7118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identity=17272 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=cb27c16d-9937-40a0-98f6-19201e569dc3,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cb27c16d-9937-40a0-98f6-19201e569dc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/nova-ks-endpoints-qjkhf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=592b5b7118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identity=17272 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/nova-ks-endpoints-qjkhf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=592b5b7118 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=86 identity=17272 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/nova-ks-endpoints-qjkhf subsys=endpoint level=info msg="Successful endpoint creation" containerID=592b5b7118 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=86 identity=17272 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/nova-ks-endpoints-qjkhf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=592b5b7118 endpointID=86 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-qjkhf subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=cb27c16d-9937-40a0-98f6-19201e569dc3 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=cb27c16d-9937-40a0-98f6-19201e569dc3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=592b5b7118 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=86 identity=17272 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/nova-ks-endpoints-qjkhf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 f28a75f4-f54f-4bdc-9df8-4b4a4c04ae34 default }" containerID=9567db1b8358a3853050a747bea5e906bdaca85340cf5b2231555cc5c0d8b8bc datapathConfiguration="&{false false false false false }" interface=lxc81745a37eeff k8sPodName=openstack/nova-ks-user-stgc7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9567db1b83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/nova-ks-user-stgc7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9567db1b83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=10d9a2cd-e72c-41d4-83db-5b413f3fb812,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=10d9a2cd-e72c-41d4-83db-5b413f3fb812,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/nova-ks-user-stgc7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=10d9a2cd-e72c-41d4-83db-5b413f3fb812;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=10d9a2cd-e72c-41d4-83db-5b413f3fb812;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9567db1b83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=16518 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=10d9a2cd-e72c-41d4-83db-5b413f3fb812,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=10d9a2cd-e72c-41d4-83db-5b413f3fb812,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/nova-ks-user-stgc7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9567db1b83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=16518 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/nova-ks-user-stgc7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9567db1b83 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=405 identity=16518 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/nova-ks-user-stgc7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9567db1b83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=405 identity=16518 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/nova-ks-user-stgc7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9567db1b83 endpointID=405 k8sNamespace=openstack k8sPodName=nova-ks-user-stgc7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=10d9a2cd-e72c-41d4-83db-5b413f3fb812 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=10d9a2cd-e72c-41d4-83db-5b413f3fb812 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=9567db1b83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=405 identity=16518 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/nova-ks-user-stgc7 subsys=endpoint level=info msg="Delete endpoint request" containerID=add00eee03 endpointID=192 k8sNamespace=openstack k8sPodName=nova-bootstrap-9z6w2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=cc0e666d-6677-4363-9d1f-81e049eabd56 k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=cc0e666d-6677-4363-9d1f-81e049eabd56 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=add00eee03 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=8520 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-bootstrap-9z6w2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 2d070f1d-a13c-45ba-af16-2b2d04f87d19 default }" containerID=1ea5bb4f6382927f47a9ef073e08e87b8ab12f30e05bc012a523190efc0e4f5c datapathConfiguration="&{false false false false false }" interface=lxc0865143a2f46 k8sPodName=local-path-storage/helper-pod-create-pvc-eda0b0b8-60f8-420f-9e81-992d01776431 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ea5bb4f63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eda0b0b8-60f8-420f-9e81-992d01776431 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ea5bb4f63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eda0b0b8-60f8-420f-9e81-992d01776431 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ea5bb4f63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=18357 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eda0b0b8-60f8-420f-9e81-992d01776431 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ea5bb4f63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=18357 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eda0b0b8-60f8-420f-9e81-992d01776431 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ea5bb4f63 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1341 identity=18357 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eda0b0b8-60f8-420f-9e81-992d01776431 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ea5bb4f63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1341 identity=18357 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eda0b0b8-60f8-420f-9e81-992d01776431 subsys=daemon level=info msg="Delete endpoint request" containerID=1ea5bb4f63 endpointID=1341 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-eda0b0b8-60f8-420f-9e81-992d01776431 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1ea5bb4f63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1341 identity=18357 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eda0b0b8-60f8-420f-9e81-992d01776431 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 935d9b57-7e31-4698-bd03-bb19ac9d0322 default }" containerID=c13af85dbaad9d366d0e100a5fde88f899d1cb2ba8b6efa2ed4227c3085d85b5 datapathConfiguration="&{false false false false false }" interface=lxcc6a71a40b714 k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c13af85dba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c13af85dba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c13af85dba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identity=44488 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c13af85dba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identity=44488 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c13af85dba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1691 identity=44488 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c13af85dba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1691 identity=44488 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.74 42b3f8ab-98ca-4b04-8029-aa49ea131bd4 default }" containerID=664f81db9227abdda25b2de5ad7e976efa20d6fa35ef9928f3c7987909295fb3 datapathConfiguration="&{false false false false false }" interface=lxc6bbad26a04ba k8sPodName=openstack/neutron-rpc-server-7f8f97d56b-r4bqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=664f81db92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/neutron-rpc-server-7f8f97d56b-r4bqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=664f81db92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/neutron-rpc-server-7f8f97d56b-r4bqw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.236 ca219c17-2bcd-4bab-a673-46903f457846 default }" containerID=633e9289555b387a82c07fe635faa2ea88d8b5834eae11b905e38b42c9799338 datapathConfiguration="&{false false false false false }" interface=lxc8259db0cb888 k8sPodName=openstack/neutron-server-677d8f6f5-tfp2n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=633e928955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/neutron-server-677d8f6f5-tfp2n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=633e928955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/neutron-server-677d8f6f5-tfp2n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=664f81db92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 identity=519 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/neutron-rpc-server-7f8f97d56b-r4bqw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=664f81db92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 identity=519 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/neutron-rpc-server-7f8f97d56b-r4bqw subsys=endpoint level=info msg="Invalid state transition skipped" containerID=633e928955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.236 ipv6= k8sPodName=openstack/neutron-server-677d8f6f5-tfp2n line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=633e928955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identity=27997 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/neutron-server-677d8f6f5-tfp2n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=633e928955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identity=27997 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/neutron-server-677d8f6f5-tfp2n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 c5087902-0c3e-4bab-9c2c-076ec5a141f5 default }" containerID=2e4c8045b1f18347a48e56ee508881c3eda46e340ba6973fc9b6b73c6b82f96a datapathConfiguration="&{false false false false false }" interface=lxc984cb96b9e99 k8sPodName=openstack/neutron-db-init-xr75l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e4c8045b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-db-init-xr75l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e4c8045b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=7fcc2364-9956-489a-a3c3-e47ac793576e,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=7fcc2364-9956-489a-a3c3-e47ac793576e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-db-init-xr75l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=7fcc2364-9956-489a-a3c3-e47ac793576e;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=7fcc2364-9956-489a-a3c3-e47ac793576e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e4c8045b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 identity=3892 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=7fcc2364-9956-489a-a3c3-e47ac793576e,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=7fcc2364-9956-489a-a3c3-e47ac793576e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-db-init-xr75l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e4c8045b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 identity=3892 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-db-init-xr75l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=664f81db92 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3684 identity=519 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/neutron-rpc-server-7f8f97d56b-r4bqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=664f81db92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3684 identity=519 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/neutron-rpc-server-7f8f97d56b-r4bqw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2e4c8045b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1394 identity=3892 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-db-init-xr75l subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e4c8045b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1394 identity=3892 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-db-init-xr75l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=633e928955 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1603 identity=27997 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/neutron-server-677d8f6f5-tfp2n subsys=endpoint level=info msg="Successful endpoint creation" containerID=633e928955 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1603 identity=27997 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/neutron-server-677d8f6f5-tfp2n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2e4c8045b1 endpointID=1394 k8sNamespace=openstack k8sPodName=neutron-db-init-xr75l subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=7fcc2364-9956-489a-a3c3-e47ac793576e k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=7fcc2364-9956-489a-a3c3-e47ac793576e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=2e4c8045b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1394 identity=3892 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-db-init-xr75l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 b2873119-25df-4e78-80fc-564f5bc5d21e default }" containerID=c9d85b5a0851ba2c4114aa7adf8e65a51d9fd53db8f9527f76cf74501ff06223 datapathConfiguration="&{false false false false false }" interface=lxc421f2c8e33e7 k8sPodName=openstack/neutron-db-sync-nmtpp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9d85b5a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-nmtpp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9d85b5a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=e422e3e4-edd0-477a-a21b-f2ac6815d23b,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=e422e3e4-edd0-477a-a21b-f2ac6815d23b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-nmtpp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=e422e3e4-edd0-477a-a21b-f2ac6815d23b;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=e422e3e4-edd0-477a-a21b-f2ac6815d23b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c9d85b5a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identity=6692 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=e422e3e4-edd0-477a-a21b-f2ac6815d23b,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=e422e3e4-edd0-477a-a21b-f2ac6815d23b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-nmtpp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9d85b5a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identity=6692 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-nmtpp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9d85b5a08 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=114 identity=6692 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-nmtpp subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9d85b5a08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=114 identity=6692 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-nmtpp subsys=daemon level=info msg="Delete endpoint request" containerID=c9d85b5a08 endpointID=114 k8sNamespace=openstack k8sPodName=neutron-db-sync-nmtpp subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=e422e3e4-edd0-477a-a21b-f2ac6815d23b k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=e422e3e4-edd0-477a-a21b-f2ac6815d23b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=c9d85b5a08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=114 identity=6692 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-nmtpp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 77aba3f1-9770-4925-bb59-4e8f4289ca13 default }" containerID=675ce6d86f6ba92dbc5cef9b172913ec5f4a571b0bc7eeb62155a6c25bc425fb datapathConfiguration="&{false false false false false }" interface=lxc5c9a502d5997 k8sPodName=openstack/neutron-rabbit-init-4vd78 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=675ce6d86f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2312 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rabbit-init-4vd78 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=675ce6d86f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2312 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d8a847e1-5e74-4927-91fd-f2b544ff7e68,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d8a847e1-5e74-4927-91fd-f2b544ff7e68,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rabbit-init-4vd78 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=675ce6d86f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2312 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rabbit-init-4vd78 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=d8a847e1-5e74-4927-91fd-f2b544ff7e68;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d8a847e1-5e74-4927-91fd-f2b544ff7e68;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=675ce6d86f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2312 identity=28882 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d8a847e1-5e74-4927-91fd-f2b544ff7e68,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d8a847e1-5e74-4927-91fd-f2b544ff7e68,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rabbit-init-4vd78 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=675ce6d86f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2312 identity=28882 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rabbit-init-4vd78 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=675ce6d86f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2312 identity=28882 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rabbit-init-4vd78 subsys=endpoint level=info msg="Successful endpoint creation" containerID=675ce6d86f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2312 identity=28882 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rabbit-init-4vd78 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=675ce6d86f endpointID=2312 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-4vd78 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=d8a847e1-5e74-4927-91fd-f2b544ff7e68 k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d8a847e1-5e74-4927-91fd-f2b544ff7e68 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=675ce6d86f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2312 identity=28882 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rabbit-init-4vd78 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 bc84ba78-05a7-4526-b726-11c3ce53336a default }" containerID=9691ee633f92818c15bae1ddcdbff9dfa452fff6e5548d3a559b4ed47500ac8c datapathConfiguration="&{false false false false false }" interface=lxc55172251d7a8 k8sPodName=openstack/neutron-ks-service-p4trs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9691ee633f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/neutron-ks-service-p4trs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9691ee633f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1fbc4021-a014-4f74-80ef-9be629394c6c,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=1fbc4021-a014-4f74-80ef-9be629394c6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/neutron-ks-service-p4trs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=1fbc4021-a014-4f74-80ef-9be629394c6c;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=1fbc4021-a014-4f74-80ef-9be629394c6c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9691ee633f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identity=28045 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1fbc4021-a014-4f74-80ef-9be629394c6c,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=1fbc4021-a014-4f74-80ef-9be629394c6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/neutron-ks-service-p4trs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9691ee633f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identity=28045 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/neutron-ks-service-p4trs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9691ee633f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=887 identity=28045 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/neutron-ks-service-p4trs subsys=endpoint level=info msg="Successful endpoint creation" containerID=9691ee633f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=887 identity=28045 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/neutron-ks-service-p4trs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9691ee633f endpointID=887 k8sNamespace=openstack k8sPodName=neutron-ks-service-p4trs subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=1fbc4021-a014-4f74-80ef-9be629394c6c k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=1fbc4021-a014-4f74-80ef-9be629394c6c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=9691ee633f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=887 identity=28045 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/neutron-ks-service-p4trs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 1d3f9456-18de-41ea-8961-18a636f1aa26 default }" containerID=cca899b3567663a8a8f6dc94953b8fbb24dfb693303e02bb564def143cdc702e datapathConfiguration="&{false false false false false }" interface=lxc0c89dfd957c6 k8sPodName=openstack/neutron-ks-endpoints-tltl4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cca899b356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tltl4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cca899b356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=a81f6461-dc8f-4698-bc39-6744029cdb31,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a81f6461-dc8f-4698-bc39-6744029cdb31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tltl4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cca899b356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tltl4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=a81f6461-dc8f-4698-bc39-6744029cdb31;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a81f6461-dc8f-4698-bc39-6744029cdb31;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cca899b356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identity=31287 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=a81f6461-dc8f-4698-bc39-6744029cdb31,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a81f6461-dc8f-4698-bc39-6744029cdb31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tltl4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cca899b356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identity=31287 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tltl4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cca899b356 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=102 identity=31287 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tltl4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cca899b356 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=102 identity=31287 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tltl4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cca899b356 endpointID=102 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-tltl4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=a81f6461-dc8f-4698-bc39-6744029cdb31 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a81f6461-dc8f-4698-bc39-6744029cdb31 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=cca899b356 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=102 identity=31287 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tltl4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 fd17988c-b9b5-4cec-b1d8-2607696771f8 default }" containerID=63c7a5c17f30dbe541da5f1fbe9ad734e556bbc6c80bfdee45f2972dd756f3bb datapathConfiguration="&{false false false false false }" interface=lxc1ebe3927d15c k8sPodName=openstack/neutron-ks-user-jcjgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63c7a5c17f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-ks-user-jcjgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63c7a5c17f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=5b310b94-6ae1-49a7-b01f-9cad6eb8653d,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=5b310b94-6ae1-49a7-b01f-9cad6eb8653d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-ks-user-jcjgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=63c7a5c17f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-ks-user-jcjgv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=5b310b94-6ae1-49a7-b01f-9cad6eb8653d;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=5b310b94-6ae1-49a7-b01f-9cad6eb8653d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63c7a5c17f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identity=31570 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=5b310b94-6ae1-49a7-b01f-9cad6eb8653d,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=5b310b94-6ae1-49a7-b01f-9cad6eb8653d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-ks-user-jcjgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63c7a5c17f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identity=31570 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-ks-user-jcjgv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63c7a5c17f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1227 identity=31570 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-ks-user-jcjgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=63c7a5c17f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1227 identity=31570 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-ks-user-jcjgv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=63c7a5c17f endpointID=1227 k8sNamespace=openstack k8sPodName=neutron-ks-user-jcjgv subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=5b310b94-6ae1-49a7-b01f-9cad6eb8653d k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=5b310b94-6ae1-49a7-b01f-9cad6eb8653d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=63c7a5c17f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1227 identity=31570 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-ks-user-jcjgv subsys=endpoint