level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.110951ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="92.512µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.173952ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="6.64µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=102.488643ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="9.72µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.491µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="54.011µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="53.741µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="59.691µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="418.198µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.93µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=7.37512ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=4.531726ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="23.49µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="26.921µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="166.323µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="56.651µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="34.75µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.527431ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="93.732µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="10.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.49.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.220948ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.557277ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.08µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.078946ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="9.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="6.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.68µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="51.412µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.171µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="132.752µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="285.545µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.94µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="223.664µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="697.233µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.244004ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.64µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="21.41µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.49 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.49 ipAddr.ipv6="" k8sNodeIP=199.204.45.49 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.49" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.242" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.49" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.49} {CiliumInternalIP 10.0.0.242}] 10.0.0.0/24 [] [] 10.0.0.218 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37633" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.613458637s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="23.011µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="7.01µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="35.901µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="16.081µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.576132088s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=287.778537ms file-path=/var/run/cilium/state/templates/95158637e6c70a93e8bc38accb5d7b71eb3e818e0c2faf8521375d3196ec9d6d/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=880 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 c0115acb-3d61-4bfa-8d0e-990828ac0cec default }" containerID=acb6369caaa13f4f7f797662bbb7cd6d337790bc78d408a85948bb53cef8db75 datapathConfiguration="&{false false false false false }" interface=lxce48d337bbc4c k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gqhlq labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.228 0ca0dbec-2cbe-45d7-82c7-96e1895d2ccb default }" containerID=1c288418313cf7ff89e509e08882a81b0a0523f5b79cc84009a14707933e51b1 datapathConfiguration="&{false false false false false }" interface=lxc39be8e624e46 k8sPodName=kube-system/coredns-7c96b6546b-r59sn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c28841831 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r59sn subsys=endpoint level=info msg="New endpoint" containerID=acb6369caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gqhlq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c28841831 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r59sn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=acb6369caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=86bed6dd-6ddc-4d35-b2eb-4e8e8b63a4fa,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=86bed6dd-6ddc-4d35-b2eb-4e8e8b63a4fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gqhlq subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c28841831 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identity=11065 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r59sn oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=1c28841831 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identity=11065 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r59sn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=acb6369caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gqhlq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=86bed6dd-6ddc-4d35-b2eb-4e8e8b63a4fa;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=86bed6dd-6ddc-4d35-b2eb-4e8e8b63a4fa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=acb6369caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=31162 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=86bed6dd-6ddc-4d35-b2eb-4e8e8b63a4fa,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=86bed6dd-6ddc-4d35-b2eb-4e8e8b63a4fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gqhlq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=acb6369caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=31162 ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gqhlq subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3207 ipv4=10.0.0.218 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3207 identityLabels="reserved:health" ipv4=10.0.0.218 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3207 identity=4 identityLabels="reserved:health" ipv4=10.0.0.218 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.047704784s file-path=/var/run/cilium/state/templates/8dddfeecec228241a321f634c79cf3015eb17356bd2803e548abd2a2db2871c3/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3207 identity=4 ipv4=10.0.0.218 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=acb6369caa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=548 identity=31162 ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gqhlq subsys=endpoint level=info msg="Successful endpoint creation" containerID=acb6369caa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=548 identity=31162 ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gqhlq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1c28841831 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=583 identity=11065 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r59sn subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c28841831 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=583 identity=11065 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r59sn subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=acb6369caa endpointID=548 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-gqhlq subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=86bed6dd-6ddc-4d35-b2eb-4e8e8b63a4fa k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=86bed6dd-6ddc-4d35-b2eb-4e8e8b63a4fa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=acb6369caa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=548 identity=31162 ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gqhlq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 85d14ac4-17ca-4668-a50a-9025519faad2 default }" containerID=9bbb9620fbf9f2e55f3fdbb9d2cd578c14ca3904131e668a57683c9e612418bb datapathConfiguration="&{false false false false false }" interface=lxcac4fd9e6cfce k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9nx5k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bbb9620fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 ipv4=10.0.0.25 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9nx5k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bbb9620fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.25 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9nx5k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bbb9620fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identity=6839 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.25 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9nx5k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bbb9620fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identity=6839 ipv4=10.0.0.25 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9nx5k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9bbb9620fb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=694 identity=6839 ipv4=10.0.0.25 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9nx5k subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bbb9620fb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=694 identity=6839 ipv4=10.0.0.25 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9nx5k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=880 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00880 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00880 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00880 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00880:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=880 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 69f1c4d7-a5d9-42a5-80e5-bbd678469cc7 default }" containerID=31c30442f058c81b2cf733eaf8e72b97da04a2fe409c57244562e72e35cbe81f datapathConfiguration="&{false false false false false }" interface=lxc1067ee731e10 k8sPodName=kube-system/coredns-67659f764b-fplng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31c30442f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 ipv4=10.0.0.54 ipv6= k8sPodName=kube-system/coredns-67659f764b-fplng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31c30442f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.54 ipv6= k8sPodName=kube-system/coredns-67659f764b-fplng subsys=endpoint level=info msg="Identity of endpoint changed" containerID=31c30442f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identity=11065 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.54 ipv6= k8sPodName=kube-system/coredns-67659f764b-fplng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31c30442f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identity=11065 ipv4=10.0.0.54 ipv6= k8sPodName=kube-system/coredns-67659f764b-fplng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 e991fb52-589e-44af-bb48-3fa0cd57cd16 default }" containerID=1b3a220e5c41db35a179fb4ed4b09749711ead0e08e176476767a78aecb2b1d9 datapathConfiguration="&{false false false false false }" interface=lxc23e39e28a7e0 k8sPodName=kube-system/coredns-67659f764b-gq2s5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b3a220e5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1448 ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-67659f764b-gq2s5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b3a220e5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1448 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-67659f764b-gq2s5 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1b3a220e5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1448 identity=11065 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-67659f764b-gq2s5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b3a220e5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1448 identity=11065 ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-67659f764b-gq2s5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31c30442f0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=129 identity=11065 ipv4=10.0.0.54 ipv6= k8sPodName=kube-system/coredns-67659f764b-fplng subsys=endpoint level=info msg="Successful endpoint creation" containerID=31c30442f0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=129 identity=11065 ipv4=10.0.0.54 ipv6= k8sPodName=kube-system/coredns-67659f764b-fplng subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1b3a220e5c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1448 identity=11065 ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-67659f764b-gq2s5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b3a220e5c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1448 identity=11065 ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-67659f764b-gq2s5 subsys=daemon level=info msg="Delete endpoint request" containerID=1c28841831 endpointID=583 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-r59sn subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=1c28841831 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=583 identity=11065 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r59sn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 6b2cc068-5b26-4b9a-8e8a-c3128551419d default }" containerID=d7fb304dd6528d08c1f89c8c6e0934bbd094c7aa80308c116e79c5b236911337 datapathConfiguration="&{false false false false false }" interface=lxc32479ccf871b k8sPodName=openstack/neutron-coredns-7dd4958666-79cxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7fb304dd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-79cxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7fb304dd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-79cxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d7fb304dd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-79cxw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7fb304dd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 identity=16229 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-79cxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7fb304dd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 identity=16229 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-79cxw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7fb304dd6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2862 identity=16229 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-79cxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7fb304dd6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2862 identity=16229 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-79cxw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.187 70f9f9f2-87d2-4fd9-acdd-2e89e457b062 default }" containerID=1d386e86a0f73ccdf5fde40d5b65d988603c3035f0c478d226f5b909ba212594 datapathConfiguration="&{false false false false false }" interface=lxcd9092f0c66e1 k8sPodName=openstack/memcached-memcached-cf56b6468-9s68b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d386e86a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2617 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-9s68b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d386e86a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2617 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-9s68b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d386e86a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2617 identity=18544 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-9s68b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d386e86a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2617 identity=18544 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-9s68b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1d386e86a0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2617 identity=18544 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-9s68b subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d386e86a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2617 identity=18544 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-9s68b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.198 d952205e-71ff-4a5d-9a8b-c7bc2262f339 default }" containerID=f2c9a0f044718e7ba5f3663928ceae75f130bf0a198a4ed816ed180fcb21e3dd datapathConfiguration="&{false false false false false }" interface=lxca1d0c09b6653 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-v4v8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2c9a0f044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3091 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-v4v8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2c9a0f044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3091 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-v4v8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2c9a0f044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3091 identity=62552 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-v4v8m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2c9a0f044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3091 identity=62552 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-v4v8m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 3e6e470c-942a-4034-a656-a678ba9967ce default }" containerID=8260036ce9f4e8561feae7ce99e0dc7c3c9f91bc107330aaf372977cd6fe2462 datapathConfiguration="&{false false false false false }" interface=lxc7f53dfd12460 k8sPodName=monitoring/node-feature-discovery-worker-bpc9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8260036ce9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bpc9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8260036ce9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bpc9c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.195 c07b1c8e-a8ea-4330-bd84-8067d3d70f08 default }" containerID=b14444e4b8b315b84f989aea8f921e078769c12ee2f079ef232a4ecde79543e0 datapathConfiguration="&{false false false false false }" interface=lxc5d2f70e3c8d0 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wgm7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b14444e4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wgm7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b14444e4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wgm7z subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8260036ce9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=52348 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bpc9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8260036ce9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=52348 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bpc9c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=f2c9a0f044 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3091 identity=62552 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-v4v8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2c9a0f044 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3091 identity=62552 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-v4v8m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8260036ce9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=576 identity=52348 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bpc9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=8260036ce9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=576 identity=52348 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bpc9c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b14444e4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wgm7z line=611 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b14444e4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wgm7z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b14444e4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identity=11334 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wgm7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b14444e4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identity=11334 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wgm7z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b14444e4b8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=792 identity=11334 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wgm7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=b14444e4b8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=792 identity=11334 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wgm7z subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.93 a02fee47-ca44-42e7-b136-a8991a841420 default }" containerID=c931dc24af88de2de5359aabef004fa10ad831fad88f2db6d3d2d6497d023493 datapathConfiguration="&{false false false false false }" interface=lxc8ed56cf803fc k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk4bp labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.6 d7422e5f-3537-4fea-a5bc-904d14eda0f3 default }" containerID=1db7149986f7253ab1e829f9c3c88201d8d049fc27a72101d2982adf6b2fd120 datapathConfiguration="&{false false false false false }" interface=lxc859202df1eb9 k8sPodName=cert-manager/cert-manager-75c4c745bc-p7zjc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c931dc24af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1984 ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk4bp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c931dc24af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1984 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5111b9d1-c964-4295-8016-9fe6c7dc124b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=5111b9d1-c964-4295-8016-9fe6c7dc124b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk4bp subsys=endpoint level=info msg="New endpoint" containerID=1db7149986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2429 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-p7zjc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1db7149986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2429 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-p7zjc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1db7149986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2429 identity=6214 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-p7zjc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1db7149986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2429 identity=6214 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-p7zjc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=5111b9d1-c964-4295-8016-9fe6c7dc124b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=5111b9d1-c964-4295-8016-9fe6c7dc124b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c931dc24af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1984 identity=2423 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5111b9d1-c964-4295-8016-9fe6c7dc124b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=5111b9d1-c964-4295-8016-9fe6c7dc124b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk4bp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c931dc24af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1984 identity=2423 ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk4bp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.170 cb253eb1-5e82-41ad-b87b-24d5794a0bbb default }" containerID=ad9f9393df79e00ff3d835100727051387c26f4a108bad7528134d6bff32b76b datapathConfiguration="&{false false false false false }" interface=lxcfe1a05602be6 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qlklw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad9f9393df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 ipv4=10.0.0.170 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qlklw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad9f9393df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.170 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qlklw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad9f9393df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=4765 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.170 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qlklw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad9f9393df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=4765 ipv4=10.0.0.170 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qlklw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 f1424737-59a7-4b99-aed4-d1d337bf4929 default }" containerID=6768c86d00b734c05b5820a05cd9e535fd5eda77f54902e260488a5625161b1a datapathConfiguration="&{false false false false false }" interface=lxc1d1931ceb998 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j89sw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6768c86d00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j89sw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6768c86d00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j89sw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=1db7149986 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2429 identity=6214 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-p7zjc subsys=endpoint level=info msg="Successful endpoint creation" containerID=1db7149986 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2429 identity=6214 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-p7zjc subsys=daemon level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6768c86d00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=4010 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j89sw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6768c86d00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=4010 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j89sw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c931dc24af datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1984 identity=2423 ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk4bp subsys=endpoint level=info msg="Successful endpoint creation" containerID=c931dc24af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1984 identity=2423 ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk4bp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ad9f9393df datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=5 identity=4765 ipv4=10.0.0.170 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qlklw subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad9f9393df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=5 identity=4765 ipv4=10.0.0.170 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qlklw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6768c86d00 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=170 identity=4010 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j89sw subsys=endpoint level=info msg="Successful endpoint creation" containerID=6768c86d00 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=170 identity=4010 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j89sw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.36 c1c05ef4-5b6a-4942-b029-24df5ccb8b2b default }" containerID=7b9276f2024dfe5c917d853bfb8c85efc7da3ea7e63cc9fa5a528eca131e37fa datapathConfiguration="&{false false false false false }" interface=lxc2522af064cbf k8sPodName=cert-manager/cert-manager-startupapicheck-mbmgs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b9276f202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mbmgs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b9276f202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=2248ad52-2ace-420e-8426-5c29e11ce21c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=2248ad52-2ace-420e-8426-5c29e11ce21c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mbmgs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=2248ad52-2ace-420e-8426-5c29e11ce21c;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=2248ad52-2ace-420e-8426-5c29e11ce21c;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b9276f202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=39096 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=2248ad52-2ace-420e-8426-5c29e11ce21c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=2248ad52-2ace-420e-8426-5c29e11ce21c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mbmgs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b9276f202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=39096 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mbmgs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 3671805e-42e1-46be-b300-0b6c4243febb default }" containerID=1ea0cf3448f25c6c4e9bbb65d71bef43578a59ca187bf1e831a01123037c2f1e datapathConfiguration="&{false false false false false }" interface=lxc635391b3efe7 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jlmms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ea0cf3448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 ipv4=10.0.0.20 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jlmms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ea0cf3448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.20 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jlmms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=7b9276f202 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2631 identity=39096 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mbmgs subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b9276f202 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2631 identity=39096 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mbmgs subsys=daemon level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ea0cf3448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identity=3916 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.20 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jlmms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ea0cf3448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identity=3916 ipv4=10.0.0.20 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jlmms subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1ea0cf3448 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1067 identity=3916 ipv4=10.0.0.20 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jlmms subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ea0cf3448 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1067 identity=3916 ipv4=10.0.0.20 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jlmms subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=880 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00880 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00880 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00880 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00880:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=880 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Delete endpoint request" containerID=c931dc24af endpointID=1984 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-lk4bp subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=5111b9d1-c964-4295-8016-9fe6c7dc124b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=5111b9d1-c964-4295-8016-9fe6c7dc124b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=c931dc24af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1984 identity=2423 ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk4bp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 fcf53fb4-f86f-48a6-82c1-3f090d9fc3b0 default }" containerID=07e2510094a3685ca0cd6e3cffbfff0a693f05634827206b47d883d2c4203b64 datapathConfiguration="&{false false false false false }" interface=lxc5ae00d756523 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-78zp6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07e2510094 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-78zp6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07e2510094 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-78zp6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07e2510094 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identity=47337 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-78zp6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07e2510094 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identity=47337 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-78zp6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07e2510094 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2823 identity=47337 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-78zp6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=07e2510094 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2823 identity=47337 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-78zp6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.142 0803d98f-57ce-47cf-9460-7fb133b0dc99 default }" containerID=11cd7688fc9ea230c9c0dd0fbce7886d85a35d79ca7cb87cf04128ad13945fcd datapathConfiguration="&{false false false false false }" interface=lxc17d8c22235ce k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x4mxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11cd7688fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x4mxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11cd7688fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=fdc21119-23e5-40e6-a643-776a89b51510,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=fdc21119-23e5-40e6-a643-776a89b51510,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x4mxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=fdc21119-23e5-40e6-a643-776a89b51510;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=fdc21119-23e5-40e6-a643-776a89b51510;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11cd7688fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 identity=1821 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=fdc21119-23e5-40e6-a643-776a89b51510,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=fdc21119-23e5-40e6-a643-776a89b51510,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x4mxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11cd7688fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 identity=1821 ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x4mxz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11cd7688fc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2061 identity=1821 ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x4mxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=11cd7688fc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2061 identity=1821 ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x4mxz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=11cd7688fc endpointID=2061 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-x4mxz subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=fdc21119-23e5-40e6-a643-776a89b51510 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=fdc21119-23e5-40e6-a643-776a89b51510 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=11cd7688fc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2061 identity=1821 ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x4mxz subsys=endpoint level=info msg="Delete endpoint request" containerID=7b9276f202 endpointID=2631 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-mbmgs subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=2248ad52-2ace-420e-8426-5c29e11ce21c k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=2248ad52-2ace-420e-8426-5c29e11ce21c k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=7b9276f202 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2631 identity=39096 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mbmgs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 57a4fa47-909d-4b55-af92-16c6f8cc736f default }" containerID=1e13fbcf78efc37b6ce10c91741aface08075e64e3048d15a104fe224a37e3ee datapathConfiguration="&{false false false false false }" interface=lxc9ac5b61731fd k8sPodName=openstack/pxc-operator-69cb5bbdb9-wn2pz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e13fbcf78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wn2pz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e13fbcf78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wn2pz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1e13fbcf78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.34 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wn2pz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e13fbcf78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=17732 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wn2pz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e13fbcf78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=17732 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wn2pz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e13fbcf78 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=22 identity=17732 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wn2pz subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e13fbcf78 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=22 identity=17732 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wn2pz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6ac1b004-3473-4293-a7a6-b43f6b4ac188] Description:}]" policyAddRequest=d050641f-ed19-4ff1-b5eb-265cfd0f40a0 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d050641f-ed19-4ff1-b5eb-265cfd0f40a0 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=1a6554ba-fb81-4f88-b1b6-4b751bc5e62b] Description:}]" policyAddRequest=058b3942-8033-45cc-8b4c-3260769e15d4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=058b3942-8033-45cc-8b4c-3260769e15d4 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.229 78529089-8b4b-49d2-aac1-4372e57444bc default }" containerID=6e5bb6ba2465138a1727a2b9fce0d8ea30bbd35a2b4938b9fac6ba64d7ba8dc3 datapathConfiguration="&{false false false false false }" interface=lxcab9314206586 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-jfrx6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e5bb6ba24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-jfrx6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e5bb6ba24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-jfrx6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6e5bb6ba24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-jfrx6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e5bb6ba24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=29452 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-jfrx6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e5bb6ba24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=29452 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-jfrx6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e5bb6ba24 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=118 identity=29452 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-jfrx6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e5bb6ba24 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=118 identity=29452 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-jfrx6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.35 cb955842-ad23-4cff-99c2-965443849890 default }" containerID=7b903e98f1cb617ae856243318f58e6c2fbcf33624a4f0d500023264f1e9f07b datapathConfiguration="&{false false false false false }" interface=lxc2264221cc26a k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-9x6sq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b903e98f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-9x6sq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b903e98f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-9x6sq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b903e98f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=19641 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-9x6sq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b903e98f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=19641 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-9x6sq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b903e98f1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=330 identity=19641 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-9x6sq subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b903e98f1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=330 identity=19641 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-9x6sq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.130 614edd64-384d-440f-90a8-92f22674f776 default }" containerID=0de024221b020801bf827765f98c6cbb0ccbd5cbeb32616ffa75bd29ae5becbb datapathConfiguration="&{false false false false false }" interface=lxc72b502089b9c k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nb9t9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0de024221b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nb9t9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0de024221b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nb9t9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0de024221b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nb9t9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0de024221b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identity=43800 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nb9t9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0de024221b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identity=43800 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nb9t9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0de024221b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=925 identity=43800 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nb9t9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0de024221b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=925 identity=43800 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nb9t9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 7cf8cf11-5b73-4876-a485-f08351ad9ebf default }" containerID=370de6e7ec0d1f33b716b5acfe3b77e864f8a6c0501babe28acf86808990b022 datapathConfiguration="&{false false false false false }" interface=lxc400cc56098f9 k8sPodName=monitoring/loki-gateway-cf54cb88c-qtjlh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=370de6e7ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-qtjlh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=370de6e7ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-qtjlh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=370de6e7ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 identity=62293 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-qtjlh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=370de6e7ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 identity=62293 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-qtjlh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=370de6e7ec datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3708 identity=62293 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-qtjlh subsys=endpoint level=info msg="Successful endpoint creation" containerID=370de6e7ec datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3708 identity=62293 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-qtjlh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.182 8b77e48f-5e80-4af2-bc94-d7fc09a166fb default }" containerID=04b80ac29c89ab29111c360aa231cea45e36e0889aa7e32a75c960a1c796628d datapathConfiguration="&{false false false false false }" interface=lxc95bbd3868609 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04b80ac29c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04b80ac29c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04b80ac29c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identity=28828 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04b80ac29c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identity=28828 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 4b8df91d-507c-4745-8b11-755d4407f9d6 default }" containerID=33625ee61be85dd26f9c1704cb654a3baf2750ba277e7e537d7dbd9efedd37de datapathConfiguration="&{false false false false false }" interface=lxc40c9a61aacfd k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33625ee61b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33625ee61b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.208 a34288b2-98a3-4e77-b3ae-5ea25ae1bd3b default }" containerID=bb1279ecc97121eef8fcdfbdb805a22b58f37beaa6ff2e7cf6830853ffe7a724 datapathConfiguration="&{false false false false false }" interface=lxc31ba5120140b k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb1279ecc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb1279ecc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33625ee61b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identity=24754 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33625ee61b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identity=24754 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb1279ecc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=970 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb1279ecc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=970 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb1279ecc9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=51 identity=970 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb1279ecc9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=51 identity=970 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=04b80ac29c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2373 identity=28828 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=04b80ac29c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2373 identity=28828 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=33625ee61b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1179 identity=24754 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=33625ee61b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1179 identity=24754 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.175 2e33b28e-a9fe-44ac-8b85-4f7f11a41b21 default }" containerID=a5ef4691ee45faa9b01681b312720abc5c00abedaa2b5a9e98187d1d329d293a datapathConfiguration="&{false false false false false }" interface=lxca376c5c5b6c3 k8sPodName=local-path-storage/helper-pod-create-pvc-e8e40930-8c4f-4097-8254-755dd1449b4a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5ef4691ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8e40930-8c4f-4097-8254-755dd1449b4a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5ef4691ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8e40930-8c4f-4097-8254-755dd1449b4a subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5ef4691ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identity=65072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8e40930-8c4f-4097-8254-755dd1449b4a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5ef4691ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identity=65072 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8e40930-8c4f-4097-8254-755dd1449b4a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5ef4691ee datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2564 identity=65072 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8e40930-8c4f-4097-8254-755dd1449b4a subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5ef4691ee datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2564 identity=65072 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8e40930-8c4f-4097-8254-755dd1449b4a subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=51bdbbf5-61e1-43b9-9ed5-f4d7b627e9a7] Description:}]" policyAddRequest=51db2eb1-3b30-4c76-bf3a-3540b5f603be subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=51db2eb1-3b30-4c76-bf3a-3540b5f603be policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.83 2a592e16-6bcf-4ee8-9961-4961baac66c1 default }" containerID=a8d6f3e6d7ac6fc7df4e362c120c8946101a03b2f5ecc43e1e5d0cc493ec6e55 datapathConfiguration="&{false false false false false }" interface=lxc72d2bee808ab k8sPodName=local-path-storage/helper-pod-create-pvc-2929091f-5fd2-4cca-bb27-d0eecc217060 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8d6f3e6d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2929091f-5fd2-4cca-bb27-d0eecc217060 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8d6f3e6d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2929091f-5fd2-4cca-bb27-d0eecc217060 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a8d6f3e6d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identity=65072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2929091f-5fd2-4cca-bb27-d0eecc217060 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8d6f3e6d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identity=65072 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2929091f-5fd2-4cca-bb27-d0eecc217060 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8d6f3e6d7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1773 identity=65072 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2929091f-5fd2-4cca-bb27-d0eecc217060 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8d6f3e6d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1773 identity=65072 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2929091f-5fd2-4cca-bb27-d0eecc217060 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.177 3dac2cfe-05d5-417b-b9cf-e263cb967007 default }" containerID=9f32b92351684be93132e58e81c26fcaba16a2de9cfaace462de7f996b2b7bca datapathConfiguration="&{false false false false false }" interface=lxcc07ac60e3729 k8sPodName=local-path-storage/helper-pod-create-pvc-1e840a8d-58a7-4185-827e-1a5569e5062d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f32b92351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3628 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e840a8d-58a7-4185-827e-1a5569e5062d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f32b92351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3628 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e840a8d-58a7-4185-827e-1a5569e5062d subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9f32b92351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3628 identity=65072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e840a8d-58a7-4185-827e-1a5569e5062d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f32b92351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3628 identity=65072 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e840a8d-58a7-4185-827e-1a5569e5062d subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9f32b92351 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3628 identity=65072 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e840a8d-58a7-4185-827e-1a5569e5062d subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f32b92351 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3628 identity=65072 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e840a8d-58a7-4185-827e-1a5569e5062d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.201 0e5ed7ac-c9df-4ae4-b419-381af2679ab6 default }" containerID=5d3bca3e93f76c1b89b2e2f61eee9829cbd3fd814b7fa634cb62bf5aeeea2814 datapathConfiguration="&{false false false false false }" interface=lxc56b70cbbd28a k8sPodName=monitoring/vector-9hswl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d3bca3e93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/vector-9hswl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d3bca3e93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/vector-9hswl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d3bca3e93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 identity=14981 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/vector-9hswl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d3bca3e93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 identity=14981 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/vector-9hswl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5d3bca3e93 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3105 identity=14981 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/vector-9hswl subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d3bca3e93 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3105 identity=14981 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/vector-9hswl subsys=daemon level=info msg="Delete endpoint request" containerID=a8d6f3e6d7 endpointID=1773 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2929091f-5fd2-4cca-bb27-d0eecc217060 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a8d6f3e6d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1773 identity=65072 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2929091f-5fd2-4cca-bb27-d0eecc217060 subsys=endpoint level=info msg="Delete endpoint request" containerID=a5ef4691ee endpointID=2564 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e8e40930-8c4f-4097-8254-755dd1449b4a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a5ef4691ee datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2564 identity=65072 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8e40930-8c4f-4097-8254-755dd1449b4a subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f32b92351 endpointID=3628 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1e840a8d-58a7-4185-827e-1a5569e5062d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9f32b92351 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3628 identity=65072 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e840a8d-58a7-4185-827e-1a5569e5062d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 47024005-1c4e-4644-a4ac-dee9861947c2 default }" containerID=360cb9f6bb537aab3a3469da948a3b7a084091159112b792cb00784aa461e11c datapathConfiguration="&{false false false false false }" interface=lxc1d6373c23cfe k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=360cb9f6bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=360cb9f6bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=360cb9f6bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identity=1908 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=360cb9f6bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identity=1908 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 4cee0118-2bd3-481d-91fd-de897d8fd1bf default }" containerID=5f649c49134e059692f5b3acc62ea6b6b95261d41a1207ef91f92de74639509a datapathConfiguration="&{false false false false false }" interface=lxcaf3f36187867 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f649c4913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f649c4913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f649c4913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identity=8891 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f649c4913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identity=8891 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=360cb9f6bb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=389 identity=1908 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=360cb9f6bb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=389 identity=1908 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5f649c4913 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=28 identity=8891 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f649c4913 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=28 identity=8891 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.149 4e6167fa-df69-47a5-8f9e-64a8d6580226 default }" containerID=44b2b31d54598e33222c828c4a1ea7c8f005a403fc7e9c9bca2ebfaccbc4450c datapathConfiguration="&{false false false false false }" interface=lxc49ffe7ae49d1 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44b2b31d54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44b2b31d54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44b2b31d54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=2253 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44b2b31d54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=2253 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44b2b31d54 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=287 identity=2253 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=44b2b31d54 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=287 identity=2253 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.000760884452087106 newInterval=7m30s subsys=map-ct level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=e13d6909-5851-43b6-9aab-1df9a6f78706] Description:}]" policyAddRequest=b5b663e8-4a55-4c06-92e2-bbcd4ea37c67 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=b5b663e8-4a55-4c06-92e2-bbcd4ea37c67 policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.109 9f687f56-6a1e-4d2e-956f-0de30258029f default }" containerID=8d522d14959ef42ec0a3375660242b464d4938f922052d4902af1cd31c66935b datapathConfiguration="&{false false false false false }" interface=lxc2b281fcee570 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d522d1495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1953 ipv4=10.0.0.109 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d522d1495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1953 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.109 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8d522d1495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1953 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d522d1495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1953 identity=6288 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.109 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d522d1495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1953 identity=6288 ipv4=10.0.0.109 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d522d1495 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1953 identity=6288 ipv4=10.0.0.109 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d522d1495 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1953 identity=6288 ipv4=10.0.0.109 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 eaa23e46-3ac0-48d0-830a-4262d37eb0d3 default }" containerID=6f37c1331da6258180550d79b62b8c353a1c243ad34c48fd553a2a44f2183e8f datapathConfiguration="&{false false false false false }" interface=lxcd22c3c582af0 k8sPodName=local-path-storage/helper-pod-create-pvc-e9a9175f-d184-44d9-bb0e-e8d1064cabcc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f37c1331d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9a9175f-d184-44d9-bb0e-e8d1064cabcc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f37c1331d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9a9175f-d184-44d9-bb0e-e8d1064cabcc subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f37c1331d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=65072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9a9175f-d184-44d9-bb0e-e8d1064cabcc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f37c1331d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=65072 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9a9175f-d184-44d9-bb0e-e8d1064cabcc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6f37c1331d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=333 identity=65072 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9a9175f-d184-44d9-bb0e-e8d1064cabcc subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f37c1331d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=333 identity=65072 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9a9175f-d184-44d9-bb0e-e8d1064cabcc subsys=daemon level=info msg="Delete endpoint request" containerID=6f37c1331d endpointID=333 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e9a9175f-d184-44d9-bb0e-e8d1064cabcc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6f37c1331d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=333 identity=65072 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9a9175f-d184-44d9-bb0e-e8d1064cabcc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 6a423884-19a6-4ddb-8bcd-a4d646649108 default }" containerID=907cf8daeed9ee7283b04523bd715fdcd4a856e4a9bbd2f181c77d4ef0058c78 datapathConfiguration="&{false false false false false }" interface=lxc91c85072ac0c k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=907cf8daee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=907cf8daee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=907cf8daee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identity=14336 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=907cf8daee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identity=14336 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=907cf8daee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=92 identity=14336 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=907cf8daee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=92 identity=14336 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.231 50254b2b-6f9e-4990-ba4f-b0d2b8632d2e default }" containerID=54b2f3c1485e465e8ce5aef3edf5a0fd3c16a7815155c3d1f50477fc8ef012fb datapathConfiguration="&{false false false false false }" interface=lxc0af6466a2083 k8sPodName=openstack/keystone-credential-setup-z85sr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54b2f3c148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-credential-setup-z85sr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54b2f3c148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20ab466a-8b69-4267-b419-6f4e06d71c58,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=20ab466a-8b69-4267-b419-6f4e06d71c58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-credential-setup-z85sr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=20ab466a-8b69-4267-b419-6f4e06d71c58;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=20ab466a-8b69-4267-b419-6f4e06d71c58;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54b2f3c148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=3845 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20ab466a-8b69-4267-b419-6f4e06d71c58,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=20ab466a-8b69-4267-b419-6f4e06d71c58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-credential-setup-z85sr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54b2f3c148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=3845 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-credential-setup-z85sr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=54b2f3c148 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=163 identity=3845 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-credential-setup-z85sr subsys=endpoint level=info msg="Successful endpoint creation" containerID=54b2f3c148 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=163 identity=3845 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-credential-setup-z85sr subsys=daemon level=info msg="Delete endpoint request" containerID=54b2f3c148 endpointID=163 k8sNamespace=openstack k8sPodName=keystone-credential-setup-z85sr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=20ab466a-8b69-4267-b419-6f4e06d71c58 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=20ab466a-8b69-4267-b419-6f4e06d71c58 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=54b2f3c148 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=163 identity=3845 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-credential-setup-z85sr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 d533a629-4e4f-46e2-b188-ebff3e390b07 default }" containerID=99bc01e763cbb2f8b8f7c3d9d5cff63b0f9c3062751452ad8c75fc8f747a8b04 datapathConfiguration="&{false false false false false }" interface=lxcb2b1cc575101 k8sPodName=openstack/keystone-db-init-dwx4c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99bc01e763 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-db-init-dwx4c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99bc01e763 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=061345a3-3659-4dbe-91f3-276913f7bffc,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=061345a3-3659-4dbe-91f3-276913f7bffc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-db-init-dwx4c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=061345a3-3659-4dbe-91f3-276913f7bffc;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=061345a3-3659-4dbe-91f3-276913f7bffc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99bc01e763 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=60608 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=061345a3-3659-4dbe-91f3-276913f7bffc,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=061345a3-3659-4dbe-91f3-276913f7bffc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-db-init-dwx4c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99bc01e763 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=60608 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-db-init-dwx4c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99bc01e763 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=535 identity=60608 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-db-init-dwx4c subsys=endpoint level=info msg="Successful endpoint creation" containerID=99bc01e763 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=535 identity=60608 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-db-init-dwx4c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=99bc01e763 endpointID=535 k8sNamespace=openstack k8sPodName=keystone-db-init-dwx4c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=061345a3-3659-4dbe-91f3-276913f7bffc k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=061345a3-3659-4dbe-91f3-276913f7bffc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=99bc01e763 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=535 identity=60608 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-db-init-dwx4c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 531bb00d-be93-48d0-a00e-de97b29381a2 default }" containerID=9b5b80a7d11b4a0d0f65faff18170a87ef76d3481549f86b022b18af3886f080 datapathConfiguration="&{false false false false false }" interface=lxc2571c8b23c3b k8sPodName=openstack/keystone-fernet-setup-p78cf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b5b80a7d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-fernet-setup-p78cf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b5b80a7d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=beb257e7-75a6-40dd-afee-0ba6bd50dce7,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=beb257e7-75a6-40dd-afee-0ba6bd50dce7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-fernet-setup-p78cf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=beb257e7-75a6-40dd-afee-0ba6bd50dce7;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=beb257e7-75a6-40dd-afee-0ba6bd50dce7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9b5b80a7d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-fernet-setup-p78cf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9b5b80a7d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identity=25317 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=beb257e7-75a6-40dd-afee-0ba6bd50dce7,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=beb257e7-75a6-40dd-afee-0ba6bd50dce7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-fernet-setup-p78cf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b5b80a7d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identity=25317 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-fernet-setup-p78cf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b5b80a7d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3990 identity=25317 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-fernet-setup-p78cf subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b5b80a7d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3990 identity=25317 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-fernet-setup-p78cf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9b5b80a7d1 endpointID=3990 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-p78cf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=beb257e7-75a6-40dd-afee-0ba6bd50dce7 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=beb257e7-75a6-40dd-afee-0ba6bd50dce7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9b5b80a7d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3990 identity=25317 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-fernet-setup-p78cf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 d2ce1b20-967d-44a2-9331-513ad2653661 default }" containerID=5b0c33628e4368a66ad9c4d289fa66223ae86ae7f9d562b8e5c5f099f3ec73fc datapathConfiguration="&{false false false false false }" interface=lxc27124445c109 k8sPodName=openstack/keystone-db-sync-g7jv9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b0c33628e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-db-sync-g7jv9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b0c33628e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f8125528-86ad-4fe0-aa9b-478858dd5708,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=f8125528-86ad-4fe0-aa9b-478858dd5708,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-db-sync-g7jv9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5b0c33628e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-db-sync-g7jv9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f8125528-86ad-4fe0-aa9b-478858dd5708;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=f8125528-86ad-4fe0-aa9b-478858dd5708;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b0c33628e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 identity=44017 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f8125528-86ad-4fe0-aa9b-478858dd5708,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=f8125528-86ad-4fe0-aa9b-478858dd5708,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-db-sync-g7jv9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b0c33628e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 identity=44017 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-db-sync-g7jv9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b0c33628e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2324 identity=44017 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-db-sync-g7jv9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b0c33628e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2324 identity=44017 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-db-sync-g7jv9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5b0c33628e endpointID=2324 k8sNamespace=openstack k8sPodName=keystone-db-sync-g7jv9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f8125528-86ad-4fe0-aa9b-478858dd5708 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=f8125528-86ad-4fe0-aa9b-478858dd5708 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5b0c33628e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2324 identity=44017 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-db-sync-g7jv9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 a86b3546-71ef-4a89-8edc-899c088f3551 default }" containerID=2d99c9bf68112379bec8800bb0f9c99ffd3c6925763acaa9b50604635ba5e209 datapathConfiguration="&{false false false false false }" interface=lxcbe3ab65a3f32 k8sPodName=openstack/keystone-rabbit-init-mcdrh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d99c9bf68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-rabbit-init-mcdrh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d99c9bf68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8ccde48e-b297-429a-a1bf-0dc1d38e4bca,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8ccde48e-b297-429a-a1bf-0dc1d38e4bca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-rabbit-init-mcdrh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8ccde48e-b297-429a-a1bf-0dc1d38e4bca;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8ccde48e-b297-429a-a1bf-0dc1d38e4bca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d99c9bf68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identity=14303 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8ccde48e-b297-429a-a1bf-0dc1d38e4bca,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8ccde48e-b297-429a-a1bf-0dc1d38e4bca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-rabbit-init-mcdrh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d99c9bf68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identity=14303 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-rabbit-init-mcdrh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2d99c9bf68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2127 identity=14303 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-rabbit-init-mcdrh subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d99c9bf68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2127 identity=14303 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-rabbit-init-mcdrh subsys=daemon level=info msg="Delete endpoint request" containerID=2d99c9bf68 endpointID=2127 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-mcdrh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8ccde48e-b297-429a-a1bf-0dc1d38e4bca k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8ccde48e-b297-429a-a1bf-0dc1d38e4bca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2d99c9bf68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2127 identity=14303 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-rabbit-init-mcdrh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 bfe488b5-6c1f-4555-a7cf-63ff98bb67c6 default }" containerID=7737fd38c7e1dd81f4db27f7096539650e86cd836575bdd66db9661835124f82 datapathConfiguration="&{false false false false false }" interface=lxc87dddb74241d k8sPodName=openstack/keystone-domain-manage-gshvb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7737fd38c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3485 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-domain-manage-gshvb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7737fd38c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3485 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=335936b8-f9f0-4cca-aa05-48c5e5068b67,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=335936b8-f9f0-4cca-aa05-48c5e5068b67,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-domain-manage-gshvb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=335936b8-f9f0-4cca-aa05-48c5e5068b67;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=335936b8-f9f0-4cca-aa05-48c5e5068b67;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7737fd38c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3485 identity=53693 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=335936b8-f9f0-4cca-aa05-48c5e5068b67,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=335936b8-f9f0-4cca-aa05-48c5e5068b67,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-domain-manage-gshvb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7737fd38c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3485 identity=53693 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-domain-manage-gshvb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7737fd38c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3485 identity=53693 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-domain-manage-gshvb subsys=endpoint level=info msg="Successful endpoint creation" containerID=7737fd38c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3485 identity=53693 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-domain-manage-gshvb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.91 efbc089a-c8e4-4656-9f5a-cbea3774d21b default }" containerID=e44cb80e2a6aa0768f38d63392e3de204518ee58c74e584293ce038f95c38f62 datapathConfiguration="&{false false false false false }" interface=lxcf0517f440064 k8sPodName=openstack/keystone-api-6cd6568bdc-zhqwk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e44cb80e2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-6cd6568bdc-zhqwk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e44cb80e2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-6cd6568bdc-zhqwk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e44cb80e2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identity=23549 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-6cd6568bdc-zhqwk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e44cb80e2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identity=23549 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-6cd6568bdc-zhqwk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e44cb80e2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=508 identity=23549 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-6cd6568bdc-zhqwk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e44cb80e2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=508 identity=23549 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-6cd6568bdc-zhqwk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7737fd38c7 endpointID=3485 k8sNamespace=openstack k8sPodName=keystone-domain-manage-gshvb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=335936b8-f9f0-4cca-aa05-48c5e5068b67 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=335936b8-f9f0-4cca-aa05-48c5e5068b67 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7737fd38c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3485 identity=53693 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-domain-manage-gshvb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 47cef23f-a478-4d25-b8ee-6d11e0bf0184 default }" containerID=dbe2944fd53d88da9c392d3c8dc164b29e347d1fe662e5209e84741a43aee933 datapathConfiguration="&{false false false false false }" interface=lxc269303908e47 k8sPodName=openstack/keystone-bootstrap-qfddb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbe2944fd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-bootstrap-qfddb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbe2944fd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b8c21ed5-1016-4fbd-ae37-d5f84cfc102d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b8c21ed5-1016-4fbd-ae37-d5f84cfc102d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-bootstrap-qfddb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b8c21ed5-1016-4fbd-ae37-d5f84cfc102d;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b8c21ed5-1016-4fbd-ae37-d5f84cfc102d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbe2944fd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identity=27895 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b8c21ed5-1016-4fbd-ae37-d5f84cfc102d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b8c21ed5-1016-4fbd-ae37-d5f84cfc102d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-bootstrap-qfddb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbe2944fd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identity=27895 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-bootstrap-qfddb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dbe2944fd5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=825 identity=27895 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-bootstrap-qfddb subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbe2944fd5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=825 identity=27895 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-bootstrap-qfddb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dbe2944fd5 endpointID=825 k8sNamespace=openstack k8sPodName=keystone-bootstrap-qfddb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b8c21ed5-1016-4fbd-ae37-d5f84cfc102d k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b8c21ed5-1016-4fbd-ae37-d5f84cfc102d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=dbe2944fd5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=825 identity=27895 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-bootstrap-qfddb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 d0f8238d-3294-4392-8643-a541fe3128ac default }" containerID=3695f62984d24fba838f0adc8afa60b1a11ac69f4a73c3c9e78deb51a0b25b8e datapathConfiguration="&{false false false false false }" interface=lxcf1e5be35a4ed k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-knrgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3695f62984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 ipv4=10.0.0.2 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-knrgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3695f62984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.2 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-knrgh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3695f62984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identity=12971 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.2 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-knrgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3695f62984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identity=12971 ipv4=10.0.0.2 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-knrgh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3695f62984 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=765 identity=12971 ipv4=10.0.0.2 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-knrgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=3695f62984 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=765 identity=12971 ipv4=10.0.0.2 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-knrgh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.124 597fe541-3d7c-40a6-a65e-ed371af32545 default }" containerID=b38b0c9b12015cbd71109e1297df34ced60a7fb3d6df1f0cbcf8c5ce01b34b6c datapathConfiguration="&{false false false false false }" interface=lxc7398c21d2ec1 k8sPodName=local-path-storage/helper-pod-create-pvc-910fc711-b549-41de-8483-252963af8943 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b38b0c9b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-910fc711-b549-41de-8483-252963af8943 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b38b0c9b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-910fc711-b549-41de-8483-252963af8943 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b38b0c9b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identity=65072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-910fc711-b549-41de-8483-252963af8943 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b38b0c9b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identity=65072 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-910fc711-b549-41de-8483-252963af8943 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b38b0c9b12 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=313 identity=65072 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-910fc711-b549-41de-8483-252963af8943 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b38b0c9b12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=313 identity=65072 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-910fc711-b549-41de-8483-252963af8943 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.71 1a9fe53e-1e16-4214-b07f-5e9e04516e21 default }" containerID=99f9742caf596dca05d45535521ecde50278c68b4f95d2567719a02abb327b73 datapathConfiguration="&{false false false false false }" interface=lxc8717b25daf14 k8sPodName=local-path-storage/helper-pod-create-pvc-177606e7-8659-4259-a8f0-2d4b90bc9fe3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99f9742caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-177606e7-8659-4259-a8f0-2d4b90bc9fe3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99f9742caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-177606e7-8659-4259-a8f0-2d4b90bc9fe3 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=99f9742caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identity=65072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-177606e7-8659-4259-a8f0-2d4b90bc9fe3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99f9742caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identity=65072 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-177606e7-8659-4259-a8f0-2d4b90bc9fe3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99f9742caf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1446 identity=65072 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-177606e7-8659-4259-a8f0-2d4b90bc9fe3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99f9742caf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1446 identity=65072 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-177606e7-8659-4259-a8f0-2d4b90bc9fe3 subsys=daemon level=info msg="Delete endpoint request" containerID=b38b0c9b12 endpointID=313 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-910fc711-b549-41de-8483-252963af8943 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b38b0c9b12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=313 identity=65072 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-910fc711-b549-41de-8483-252963af8943 subsys=endpoint level=info msg="Delete endpoint request" containerID=99f9742caf endpointID=1446 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-177606e7-8659-4259-a8f0-2d4b90bc9fe3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=99f9742caf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1446 identity=65072 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-177606e7-8659-4259-a8f0-2d4b90bc9fe3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 4806cbf8-f298-4326-a951-bb3e6d76750d default }" containerID=593e98d6faeb524bed0cf76ba1b55e46b0cd80e5b2a6ccde7575caf301ed03d0 datapathConfiguration="&{false false false false false }" interface=lxcd43cf5e18060 k8sPodName=local-path-storage/helper-pod-create-pvc-a1b6ac74-abee-43d7-9721-72f827cf3410 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=593e98d6fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 ipv4=10.0.0.12 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1b6ac74-abee-43d7-9721-72f827cf3410 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=593e98d6fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.12 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1b6ac74-abee-43d7-9721-72f827cf3410 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=593e98d6fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identity=65072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.12 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1b6ac74-abee-43d7-9721-72f827cf3410 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=593e98d6fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identity=65072 ipv4=10.0.0.12 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1b6ac74-abee-43d7-9721-72f827cf3410 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 f139ef9a-452a-44c0-accb-ea76c761563c default }" containerID=137c879e5fdc297a5c83b6de15a04f550337ae5721b0aa0e322e9c6b974b391b datapathConfiguration="&{false false false false false }" interface=lxc29d0ce6edb15 k8sPodName=openstack/placement-api-55bcddf448-vjgnn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=137c879e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1928 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/placement-api-55bcddf448-vjgnn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=137c879e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1928 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/placement-api-55bcddf448-vjgnn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=137c879e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1928 identity=51856 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/placement-api-55bcddf448-vjgnn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=137c879e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1928 identity=51856 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/placement-api-55bcddf448-vjgnn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=593e98d6fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1024 identity=65072 ipv4=10.0.0.12 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1b6ac74-abee-43d7-9721-72f827cf3410 subsys=endpoint level=info msg="Successful endpoint creation" containerID=593e98d6fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1024 identity=65072 ipv4=10.0.0.12 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1b6ac74-abee-43d7-9721-72f827cf3410 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.70 49c6c2a8-d119-4dff-849e-1696071e8f7b default }" containerID=b0f21c29cd4783745aa3e4d582d723f090d9d285667cd4c5f523a58e035aa0aa datapathConfiguration="&{false false false false false }" interface=lxcb5461d52489f k8sPodName=openstack/placement-db-init-26hwt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0f21c29cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=562 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/placement-db-init-26hwt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0f21c29cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=562 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=fb1a051f-4e21-43b1-993a-d6946a54ee9e,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=fb1a051f-4e21-43b1-993a-d6946a54ee9e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/placement-db-init-26hwt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=fb1a051f-4e21-43b1-993a-d6946a54ee9e;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=fb1a051f-4e21-43b1-993a-d6946a54ee9e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0f21c29cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=562 identity=12538 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=fb1a051f-4e21-43b1-993a-d6946a54ee9e,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=fb1a051f-4e21-43b1-993a-d6946a54ee9e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/placement-db-init-26hwt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0f21c29cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=562 identity=12538 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/placement-db-init-26hwt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=137c879e5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1928 identity=51856 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/placement-api-55bcddf448-vjgnn subsys=endpoint level=info msg="Successful endpoint creation" containerID=137c879e5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1928 identity=51856 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/placement-api-55bcddf448-vjgnn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b0f21c29cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=562 identity=12538 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/placement-db-init-26hwt subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0f21c29cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=562 identity=12538 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/placement-db-init-26hwt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.100 2a4fba9f-2324-4d7f-be24-64a647846e42 default }" containerID=f00405e30c10281bcd432f1333d9f9bf41259ba6cda83dcf96dce5af35d759b7 datapathConfiguration="&{false false false false false }" interface=lxcfca67258006a k8sPodName=openstack/horizon-db-init-zr9mn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f00405e30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/horizon-db-init-zr9mn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 e822c480-728a-419c-b1f2-0cd1e254eb84 default }" containerID=6e2bd10bcf24cd8f758e690f40c287752471cf9472cd8567531e3ed85a360349 datapathConfiguration="&{false false false false false }" interface=lxcb87f92b53df5 k8sPodName=openstack/horizon-d4bfcc96f-v98q8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e2bd10bcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2877 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/horizon-d4bfcc96f-v98q8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f00405e30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=78c67297-dd6d-46b5-b3e3-a2b4d368da5b,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=78c67297-dd6d-46b5-b3e3-a2b4d368da5b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/horizon-db-init-zr9mn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=6e2bd10bcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2877 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/horizon-d4bfcc96f-v98q8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=78c67297-dd6d-46b5-b3e3-a2b4d368da5b;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=78c67297-dd6d-46b5-b3e3-a2b4d368da5b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f00405e30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identity=5710 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=78c67297-dd6d-46b5-b3e3-a2b4d368da5b,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=78c67297-dd6d-46b5-b3e3-a2b4d368da5b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/horizon-db-init-zr9mn oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=f00405e30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identity=5710 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/horizon-db-init-zr9mn subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e2bd10bcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2877 identity=39075 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/horizon-d4bfcc96f-v98q8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e2bd10bcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2877 identity=39075 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/horizon-d4bfcc96f-v98q8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f00405e30c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1161 identity=5710 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/horizon-db-init-zr9mn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f00405e30c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1161 identity=5710 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/horizon-db-init-zr9mn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6e2bd10bcf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2877 identity=39075 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/horizon-d4bfcc96f-v98q8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e2bd10bcf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2877 identity=39075 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/horizon-d4bfcc96f-v98q8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 bf1de0c2-7068-4c48-8909-1db4d23d49c4 default }" containerID=0a799bf71fbfe6b6552b283946d63e6f9810a582e92085fdb7b633980e920f31 datapathConfiguration="&{false false false false false }" interface=lxce36c209cff7f k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a799bf71f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a799bf71f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a799bf71f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=40471 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a799bf71f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=40471 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a799bf71f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=348 identity=40471 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a799bf71f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=348 identity=40471 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="Delete endpoint request" containerID=593e98d6fa endpointID=1024 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a1b6ac74-abee-43d7-9721-72f827cf3410 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=593e98d6fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1024 identity=65072 ipv4=10.0.0.12 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1b6ac74-abee-43d7-9721-72f827cf3410 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.7 9eeb9a5c-a71e-40db-be41-7efcd19fb8ec default }" containerID=b2e0286b92e0938f9353f04537a3144bcc070ad008b7b362b2ac25544831c065 datapathConfiguration="&{false false false false false }" interface=lxcd2d814645a36 k8sPodName=openstack/rabbitmq-heat-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2e0286b92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2e0286b92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-heat;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2e0286b92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=2696 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2e0286b92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=2696 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2e0286b92 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=803 identity=2696 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2e0286b92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=803 identity=2696 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 922207d5-d7bf-4473-b464-64ce856fe817 default }" containerID=10a0ad77768c4e764d7099c2e65000c35ad247cb55f3c57ce391e29280498e8a datapathConfiguration="&{false false false false false }" interface=lxcb0ccddca6b63 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10a0ad7776 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10a0ad7776 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10a0ad7776 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 identity=23140 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10a0ad7776 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 identity=23140 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=10a0ad7776 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3867 identity=23140 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=10a0ad7776 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3867 identity=23140 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Delete endpoint request" containerID=b0f21c29cd endpointID=562 k8sNamespace=openstack k8sPodName=placement-db-init-26hwt subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=fb1a051f-4e21-43b1-993a-d6946a54ee9e k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=fb1a051f-4e21-43b1-993a-d6946a54ee9e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Delete endpoint request" containerID=f00405e30c endpointID=1161 k8sNamespace=openstack k8sPodName=horizon-db-init-zr9mn subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=78c67297-dd6d-46b5-b3e3-a2b4d368da5b k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=78c67297-dd6d-46b5-b3e3-a2b4d368da5b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=b0f21c29cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=562 identity=12538 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/placement-db-init-26hwt subsys=endpoint level=info msg="Removed endpoint" containerID=f00405e30c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1161 identity=5710 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/horizon-db-init-zr9mn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 1ce4fd7a-6f7a-45a1-b024-a9a8c5c4254a default }" containerID=547a19f2ea88e91b2ea8cf1d8230481f99640e80f084396ac63e09bc964d42b1 datapathConfiguration="&{false false false false false }" interface=lxc4a2ea6b02a81 k8sPodName=openstack/horizon-db-sync-x5ccz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=547a19f2ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/horizon-db-sync-x5ccz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=547a19f2ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=fbf2dab3-b749-44cc-bf36-22199e904ac6,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=fbf2dab3-b749-44cc-bf36-22199e904ac6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/horizon-db-sync-x5ccz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=fbf2dab3-b749-44cc-bf36-22199e904ac6;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=fbf2dab3-b749-44cc-bf36-22199e904ac6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=547a19f2ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.94 ipv6= k8sPodName=openstack/horizon-db-sync-x5ccz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=547a19f2ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identity=17386 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=fbf2dab3-b749-44cc-bf36-22199e904ac6,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=fbf2dab3-b749-44cc-bf36-22199e904ac6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/horizon-db-sync-x5ccz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=547a19f2ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identity=17386 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/horizon-db-sync-x5ccz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 006224f2-952b-4c84-9a6f-ea7589ab380e default }" containerID=ee5bf2702084a039b604bb99335f018afa208aa9832387270f16d3eb06d6b267 datapathConfiguration="&{false false false false false }" interface=lxcc26b727010ec k8sPodName=openstack/placement-db-sync-ddhtr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee5bf27020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-db-sync-ddhtr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee5bf27020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=f75f48c7-ee29-401c-803a-88bed11cd942,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=f75f48c7-ee29-401c-803a-88bed11cd942,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-db-sync-ddhtr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=f75f48c7-ee29-401c-803a-88bed11cd942;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=f75f48c7-ee29-401c-803a-88bed11cd942;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee5bf27020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=35576 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=f75f48c7-ee29-401c-803a-88bed11cd942,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=f75f48c7-ee29-401c-803a-88bed11cd942,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-db-sync-ddhtr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee5bf27020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=35576 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-db-sync-ddhtr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=547a19f2ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=985 identity=17386 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/horizon-db-sync-x5ccz subsys=endpoint level=info msg="Successful endpoint creation" containerID=547a19f2ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=985 identity=17386 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/horizon-db-sync-x5ccz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ee5bf27020 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=115 identity=35576 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-db-sync-ddhtr subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee5bf27020 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=115 identity=35576 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-db-sync-ddhtr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.9 efd10b01-b32c-4864-b351-9b58e6272ac2 default }" containerID=94631788548fc4abee3a2e63ed85aa7a7799efc0d9de53dd270d70ef5b0600aa datapathConfiguration="&{false false false false false }" interface=lxc107c04e9afb9 k8sPodName=local-path-storage/helper-pod-create-pvc-3f0982a2-a344-4878-8e1a-653ab66ddbc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9463178854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f0982a2-a344-4878-8e1a-653ab66ddbc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9463178854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f0982a2-a344-4878-8e1a-653ab66ddbc6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9463178854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identity=65072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f0982a2-a344-4878-8e1a-653ab66ddbc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9463178854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identity=65072 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f0982a2-a344-4878-8e1a-653ab66ddbc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9463178854 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=326 identity=65072 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f0982a2-a344-4878-8e1a-653ab66ddbc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9463178854 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=326 identity=65072 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f0982a2-a344-4878-8e1a-653ab66ddbc6 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9463178854 endpointID=326 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3f0982a2-a344-4878-8e1a-653ab66ddbc6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9463178854 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=326 identity=65072 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f0982a2-a344-4878-8e1a-653ab66ddbc6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 ac486498-5112-410b-a124-6dcaa0a5f4ea default }" containerID=429fb74e8a513cab7c7ab4b7f0ac6301e8c6b8287e8c09b29375f6279a797894 datapathConfiguration="&{false false false false false }" interface=lxc2ef5f0395144 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=429fb74e8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=429fb74e8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=429fb74e8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=429fb74e8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identity=14039 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=429fb74e8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identity=14039 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=429fb74e8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2127 identity=14039 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=429fb74e8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2127 identity=14039 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.129 6daa8a40-5d9c-4f15-990e-fa2d3cfb2c9f default }" containerID=12b009d1dd58c9f1151ac05dfad31fb9c88f9291a6412e9e4e3c15961f508ec6 datapathConfiguration="&{false false false false false }" interface=lxc2237c443cc96 k8sPodName=openstack/cinder-scheduler-5f58d95b54-zg7fj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12b009d1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-scheduler-5f58d95b54-zg7fj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12b009d1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-scheduler-5f58d95b54-zg7fj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12b009d1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identity=27714 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-scheduler-5f58d95b54-zg7fj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12b009d1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identity=27714 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-scheduler-5f58d95b54-zg7fj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.235 d4cf8d0f-7c58-4351-959f-5a3c86dff608 default }" containerID=a44cf54eb1e7d723e2d4bc0be9ae015c44e55d73b3a4310878fa10ec71e6beeb datapathConfiguration="&{false false false false false }" interface=lxcd62d058d1839 k8sPodName=openstack/cinder-api-57fdc6cf98-xqkpc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a44cf54eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3510 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-api-57fdc6cf98-xqkpc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a44cf54eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3510 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-api-57fdc6cf98-xqkpc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a44cf54eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3510 identity=14160 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-api-57fdc6cf98-xqkpc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a44cf54eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3510 identity=14160 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-api-57fdc6cf98-xqkpc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12b009d1dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1344 identity=27714 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-scheduler-5f58d95b54-zg7fj subsys=endpoint level=info msg="Successful endpoint creation" containerID=12b009d1dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1344 identity=27714 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-scheduler-5f58d95b54-zg7fj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.15 19052679-6c01-456f-97ec-5bb7f8cf967e default }" containerID=d024df00273c41ecfb6b3f312c9e71b06aa39a64926da64f1a416a1e5bf87f70 datapathConfiguration="&{false false false false false }" interface=lxcd3ab24c1b636 k8sPodName=openstack/cinder-db-init-7ftmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d024df0027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-db-init-7ftmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d024df0027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=6e6e4ad2-b5ba-4dfa-ba18-3eea20c28ea8,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=6e6e4ad2-b5ba-4dfa-ba18-3eea20c28ea8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-db-init-7ftmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=6e6e4ad2-b5ba-4dfa-ba18-3eea20c28ea8;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=6e6e4ad2-b5ba-4dfa-ba18-3eea20c28ea8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d024df0027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=43595 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=6e6e4ad2-b5ba-4dfa-ba18-3eea20c28ea8,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=6e6e4ad2-b5ba-4dfa-ba18-3eea20c28ea8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-db-init-7ftmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d024df0027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=43595 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-db-init-7ftmh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a44cf54eb1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3510 identity=14160 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-api-57fdc6cf98-xqkpc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a44cf54eb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3510 identity=14160 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-api-57fdc6cf98-xqkpc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d024df0027 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=782 identity=43595 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-db-init-7ftmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=d024df0027 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=782 identity=43595 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-db-init-7ftmh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 90d626e2-44e8-45b2-b3db-72eb5de7de94 default }" containerID=e634453e3d71c4382d386efd322a67afb2dfae186060c81a80d593d89121570d datapathConfiguration="&{false false false false false }" interface=lxc16ac8e5cac7f k8sPodName=openstack/heat-api-6b9b69f5fd-rm5tr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e634453e3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4003 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/heat-api-6b9b69f5fd-rm5tr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e634453e3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4003 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/heat-api-6b9b69f5fd-rm5tr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e634453e3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4003 identity=4782 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/heat-api-6b9b69f5fd-rm5tr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e634453e3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4003 identity=4782 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/heat-api-6b9b69f5fd-rm5tr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 b9d3d0e6-6212-49f1-a9f2-d9af717d0b93 default }" containerID=9d2c67e0af0397de2c821e7a7cb406aeee74b51ab03e42b28069bf7e746a63a6 datapathConfiguration="&{false false false false false }" interface=lxce0d469967fcc k8sPodName=openstack/heat-cfn-77486f8ddd-c4z7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d2c67e0af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/heat-cfn-77486f8ddd-c4z7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d2c67e0af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/heat-cfn-77486f8ddd-c4z7h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=cfn;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d2c67e0af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identity=935 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/heat-cfn-77486f8ddd-c4z7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d2c67e0af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identity=935 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/heat-cfn-77486f8ddd-c4z7h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 c87f7ebc-edee-44f4-b696-4dbac1256c40 default }" containerID=286f634ecd5dd84568106108e73fb30fcf12a03b4f08aac6196a11100edcb51c datapathConfiguration="&{false false false false false }" interface=lxcb1bcf0d56cb2 k8sPodName=openstack/heat-db-init-pdvpd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=286f634ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/heat-db-init-pdvpd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=286f634ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=88917ff4-6945-4512-a643-a58e2118abb9,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=88917ff4-6945-4512-a643-a58e2118abb9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/heat-db-init-pdvpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.253 19fd330c-f230-4068-bec7-49d35a364aa9 default }" containerID=007338826f01146789a3b382ce680daff86b3056ada64071c9e3a7ed67f5475b datapathConfiguration="&{false false false false false }" interface=lxc43dd52b2bae2 k8sPodName=openstack/heat-engine-7cdbfb6dff-jp2z8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=007338826f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/heat-engine-7cdbfb6dff-jp2z8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=007338826f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/heat-engine-7cdbfb6dff-jp2z8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e634453e3d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4003 identity=4782 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/heat-api-6b9b69f5fd-rm5tr subsys=endpoint level=info msg="Successful endpoint creation" containerID=e634453e3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4003 identity=4782 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/heat-api-6b9b69f5fd-rm5tr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9d2c67e0af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1861 identity=935 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/heat-cfn-77486f8ddd-c4z7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d2c67e0af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1861 identity=935 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/heat-cfn-77486f8ddd-c4z7h subsys=daemon level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=88917ff4-6945-4512-a643-a58e2118abb9;k8s:batch.kubernetes.io/job-name=heat-db-init;k8s:component=db-init;k8s:controller-uid=88917ff4-6945-4512-a643-a58e2118abb9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=286f634ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=62458 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=88917ff4-6945-4512-a643-a58e2118abb9,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=88917ff4-6945-4512-a643-a58e2118abb9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/heat-db-init-pdvpd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=286f634ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=62458 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/heat-db-init-pdvpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=007338826f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.253 ipv6= k8sPodName=openstack/heat-engine-7cdbfb6dff-jp2z8 line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=286f634ecd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=151 identity=62458 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/heat-db-init-pdvpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=286f634ecd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=151 identity=62458 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/heat-db-init-pdvpd subsys=daemon level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=engine;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=007338826f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identity=6758 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/heat-engine-7cdbfb6dff-jp2z8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=007338826f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identity=6758 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/heat-engine-7cdbfb6dff-jp2z8 subsys=endpoint level=info msg="Delete endpoint request" containerID=547a19f2ea endpointID=985 k8sNamespace=openstack k8sPodName=horizon-db-sync-x5ccz subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=fbf2dab3-b749-44cc-bf36-22199e904ac6 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=fbf2dab3-b749-44cc-bf36-22199e904ac6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Delete endpoint request" containerID=ee5bf27020 endpointID=115 k8sNamespace=openstack k8sPodName=placement-db-sync-ddhtr subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=f75f48c7-ee29-401c-803a-88bed11cd942 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=f75f48c7-ee29-401c-803a-88bed11cd942 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=ee5bf27020 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=115 identity=35576 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-db-sync-ddhtr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=007338826f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1164 identity=6758 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/heat-engine-7cdbfb6dff-jp2z8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=007338826f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1164 identity=6758 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/heat-engine-7cdbfb6dff-jp2z8 subsys=daemon level=info msg="Removed endpoint" containerID=547a19f2ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=985 identity=17386 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/horizon-db-sync-x5ccz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.151 fcedee0c-8c0d-4d30-a5e3-29a68419f127 default }" containerID=ca79fa6fc63a3cd80a3cdabba1bdef75cb68724efdce8b9dab6499e0085289af datapathConfiguration="&{false false false false false }" interface=lxc9676e2bf3a9c k8sPodName=openstack/glance-db-init-tm6sm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca79fa6fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-db-init-tm6sm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca79fa6fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7550ae0b-5fd0-42f9-bb94-02adc48f20ee,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=7550ae0b-5fd0-42f9-bb94-02adc48f20ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-db-init-tm6sm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7550ae0b-5fd0-42f9-bb94-02adc48f20ee;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=7550ae0b-5fd0-42f9-bb94-02adc48f20ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca79fa6fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identity=15402 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7550ae0b-5fd0-42f9-bb94-02adc48f20ee,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=7550ae0b-5fd0-42f9-bb94-02adc48f20ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-db-init-tm6sm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca79fa6fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identity=15402 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-db-init-tm6sm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 80e450b3-b274-443c-a5c0-63b7609991e5 default }" containerID=70c821695ade4053954ab92bb3c62805cb073a19064c67af236ddc236c0b46f8 datapathConfiguration="&{false false false false false }" interface=lxc1589fa8b96ca k8sPodName=openstack/placement-ks-service-qcpm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70c821695a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/placement-ks-service-qcpm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70c821695a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=348f57dd-39e2-4c99-998e-2a65b5f725d2,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=348f57dd-39e2-4c99-998e-2a65b5f725d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/placement-ks-service-qcpm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=70c821695a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.236 ipv6= k8sPodName=openstack/placement-ks-service-qcpm8 line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca79fa6fc6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=201 identity=15402 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-db-init-tm6sm subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca79fa6fc6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=201 identity=15402 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-db-init-tm6sm subsys=daemon level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=348f57dd-39e2-4c99-998e-2a65b5f725d2;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=348f57dd-39e2-4c99-998e-2a65b5f725d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70c821695a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 identity=62034 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=348f57dd-39e2-4c99-998e-2a65b5f725d2,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=348f57dd-39e2-4c99-998e-2a65b5f725d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/placement-ks-service-qcpm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70c821695a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 identity=62034 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/placement-ks-service-qcpm8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70c821695a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2404 identity=62034 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/placement-ks-service-qcpm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70c821695a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2404 identity=62034 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/placement-ks-service-qcpm8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 6a45d8ec-b964-4afa-a174-afeb2d6b0d33 default }" containerID=0d13f644eb50cd7e06bf76fa1af577734431524b64415c57f01a7a777aa2fbbb datapathConfiguration="&{false false false false false }" interface=lxcaf557ca180f1 k8sPodName=openstack/rook-ceph-detect-version-crt4q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d13f644eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2524 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rook-ceph-detect-version-crt4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d13f644eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2524 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=fba0bbce-8260-4348-bce6-5ff3b61f7b2d,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=fba0bbce-8260-4348-bce6-5ff3b61f7b2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rook-ceph-detect-version-crt4q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=fba0bbce-8260-4348-bce6-5ff3b61f7b2d;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=fba0bbce-8260-4348-bce6-5ff3b61f7b2d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d13f644eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2524 identity=38113 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=fba0bbce-8260-4348-bce6-5ff3b61f7b2d,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=fba0bbce-8260-4348-bce6-5ff3b61f7b2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rook-ceph-detect-version-crt4q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d13f644eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2524 identity=38113 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rook-ceph-detect-version-crt4q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d13f644eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2524 identity=38113 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rook-ceph-detect-version-crt4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d13f644eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2524 identity=38113 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rook-ceph-detect-version-crt4q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=286f634ecd endpointID=151 k8sNamespace=openstack k8sPodName=heat-db-init-pdvpd subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=88917ff4-6945-4512-a643-a58e2118abb9 k8s:batch.kubernetes.io/job-name=heat-db-init k8s:component=db-init k8s:controller-uid=88917ff4-6945-4512-a643-a58e2118abb9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-init k8s:release_group=heat]" subsys=allocator level=info msg="Delete endpoint request" containerID=d024df0027 endpointID=782 k8sNamespace=openstack k8sPodName=cinder-db-init-7ftmh subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=6e6e4ad2-b5ba-4dfa-ba18-3eea20c28ea8 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=6e6e4ad2-b5ba-4dfa-ba18-3eea20c28ea8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=286f634ecd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=151 identity=62458 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/heat-db-init-pdvpd subsys=endpoint level=info msg="Removed endpoint" containerID=d024df0027 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=782 identity=43595 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-db-init-7ftmh subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 54c54a39-a947-4265-ba11-a4cbb4067c7e default }" containerID=6a7d65a449a1d9abfd59f9454f323c13c30bb572474a1b769bf37a08289db5fd datapathConfiguration="&{false false false false false }" interface=lxc49f77c6b8b13 k8sPodName=openstack/heat-db-sync-j9vs5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a7d65a449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-db-sync-j9vs5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a7d65a449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=a451791e-b346-4f51-93dc-5c29c2213f71,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=a451791e-b346-4f51-93dc-5c29c2213f71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-db-sync-j9vs5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6a7d65a449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-db-sync-j9vs5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=a451791e-b346-4f51-93dc-5c29c2213f71;k8s:batch.kubernetes.io/job-name=heat-db-sync;k8s:component=db-sync;k8s:controller-uid=a451791e-b346-4f51-93dc-5c29c2213f71;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-sync;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a7d65a449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=33842 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=a451791e-b346-4f51-93dc-5c29c2213f71,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=a451791e-b346-4f51-93dc-5c29c2213f71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-db-sync-j9vs5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a7d65a449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=33842 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-db-sync-j9vs5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 13fcd112-695e-4e3d-8745-4832c4a70158 default }" containerID=ec69944ecce6a8bceefb37360344612e3a58243f331a54f516d2a8603b47c09c datapathConfiguration="&{false false false false false }" interface=lxcbef10a9e7432 k8sPodName=openstack/cinder-db-sync-mg4d2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec69944ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-db-sync-mg4d2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec69944ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=bb31c52c-c722-4d05-a0d8-edc36bcfc023,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=bb31c52c-c722-4d05-a0d8-edc36bcfc023,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-db-sync-mg4d2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=bb31c52c-c722-4d05-a0d8-edc36bcfc023;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=bb31c52c-c722-4d05-a0d8-edc36bcfc023;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec69944ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identity=12029 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=bb31c52c-c722-4d05-a0d8-edc36bcfc023,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=bb31c52c-c722-4d05-a0d8-edc36bcfc023,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-db-sync-mg4d2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec69944ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identity=12029 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-db-sync-mg4d2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a7d65a449 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=838 identity=33842 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-db-sync-j9vs5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a7d65a449 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=838 identity=33842 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-db-sync-j9vs5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ec69944ecc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2365 identity=12029 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-db-sync-mg4d2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec69944ecc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2365 identity=12029 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-db-sync-mg4d2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca79fa6fc6 endpointID=201 k8sNamespace=openstack k8sPodName=glance-db-init-tm6sm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7550ae0b-5fd0-42f9-bb94-02adc48f20ee k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=7550ae0b-5fd0-42f9-bb94-02adc48f20ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ca79fa6fc6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=201 identity=15402 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-db-init-tm6sm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 75f35712-71a0-474d-bd49-89fc71ccb5d9 default }" containerID=9c9cf471a6f5cecb70f45fb61c90fb3f4e8704e056c3df1c2e9fc3383ee91122 datapathConfiguration="&{false false false false false }" interface=lxc594cd9f712d1 k8sPodName=openstack/barbican-api-6c68d8b5b5-562f2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c9cf471a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-api-6c68d8b5b5-562f2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c9cf471a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-api-6c68d8b5b5-562f2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9c9cf471a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-api-6c68d8b5b5-562f2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c9cf471a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=17789 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-api-6c68d8b5b5-562f2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c9cf471a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=17789 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-api-6c68d8b5b5-562f2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 fb30c7d6-fd8f-43f4-90ec-8607d15cce85 default }" containerID=d8fb7ff9ba2849d1edaba8d7a1e4901868fb9f643c81974f74ab848cb75a8e24 datapathConfiguration="&{false false false false false }" interface=lxc604248ecda1f k8sPodName=openstack/barbican-db-init-nsx62 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8fb7ff9ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-nsx62 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8fb7ff9ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3629f070-073a-4236-b231-4d4c15617905,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=3629f070-073a-4236-b231-4d4c15617905,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-nsx62 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3629f070-073a-4236-b231-4d4c15617905;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=3629f070-073a-4236-b231-4d4c15617905;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8fb7ff9ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identity=50702 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3629f070-073a-4236-b231-4d4c15617905,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=3629f070-073a-4236-b231-4d4c15617905,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-nsx62 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8fb7ff9ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identity=50702 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-nsx62 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c9cf471a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=405 identity=17789 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-api-6c68d8b5b5-562f2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c9cf471a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=405 identity=17789 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-api-6c68d8b5b5-562f2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d8fb7ff9ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2891 identity=50702 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-nsx62 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8fb7ff9ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2891 identity=50702 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-nsx62 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.031828695875661124 newInterval=11m15s subsys=map-ct level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.57 7b560318-9e8f-4b4c-a0b8-2838d35cc783 default }" containerID=5bc716bf51b49da619d6a9800e580ace7347545c57bab49d53231607106f7012 datapathConfiguration="&{false false false false false }" interface=lxca7c3ee6dc601 k8sPodName=openstack/glance-db-sync-pl885 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bc716bf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-pl885 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bc716bf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=212113dd-6bd3-4724-b09b-d6e4abb10a85,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=212113dd-6bd3-4724-b09b-d6e4abb10a85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-pl885 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=212113dd-6bd3-4724-b09b-d6e4abb10a85;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=212113dd-6bd3-4724-b09b-d6e4abb10a85;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5bc716bf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-pl885 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5bc716bf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=41409 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=212113dd-6bd3-4724-b09b-d6e4abb10a85,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=212113dd-6bd3-4724-b09b-d6e4abb10a85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-pl885 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5bc716bf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=41409 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-pl885 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5bc716bf51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=101 identity=41409 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-pl885 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bc716bf51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=101 identity=41409 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-pl885 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.112 c45bd50c-8a79-4d16-8822-c4e9ab661ba7 default }" containerID=13a97ea27dc14c487f8f62975745de09063efbd070eb95bf95334c16cf926b14 datapathConfiguration="&{false false false false false }" interface=lxc5a96a60ccf54 k8sPodName=openstack/heat-engine-cleaner-29619415-94l4t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13a97ea27d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/heat-engine-cleaner-29619415-94l4t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13a97ea27d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=80334530-f296-448f-91bf-213777ecba8a,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29619415,k8s:component=engine-cleaner,k8s:controller-uid=80334530-f296-448f-91bf-213777ecba8a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29619415,k8s:release_group=heat" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/heat-engine-cleaner-29619415-94l4t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=80334530-f296-448f-91bf-213777ecba8a;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29619415;k8s:component=engine-cleaner;k8s:controller-uid=80334530-f296-448f-91bf-213777ecba8a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29619415;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13a97ea27d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=19052 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=80334530-f296-448f-91bf-213777ecba8a,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29619415,k8s:component=engine-cleaner,k8s:controller-uid=80334530-f296-448f-91bf-213777ecba8a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29619415,k8s:release_group=heat" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/heat-engine-cleaner-29619415-94l4t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13a97ea27d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=19052 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/heat-engine-cleaner-29619415-94l4t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13a97ea27d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=526 identity=19052 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/heat-engine-cleaner-29619415-94l4t subsys=endpoint level=info msg="Successful endpoint creation" containerID=13a97ea27d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=526 identity=19052 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/heat-engine-cleaner-29619415-94l4t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70c821695a endpointID=2404 k8sNamespace=openstack k8sPodName=placement-ks-service-qcpm8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=348f57dd-39e2-4c99-998e-2a65b5f725d2 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=348f57dd-39e2-4c99-998e-2a65b5f725d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=70c821695a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2404 identity=62034 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/placement-ks-service-qcpm8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 7a7dd687-f403-4151-a244-bb3cb45873f4 default }" containerID=9e656246796aa2125dbf96dc1979e335204141e76f9cd5ffc49c00fce3c95a63 datapathConfiguration="&{false false false false false }" interface=lxc4ffa8e0ac9c9 k8sPodName=openstack/placement-ks-user-tp44z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e65624679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-user-tp44z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e65624679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=287b33a8-fa60-485f-b470-496464e45c6b,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=287b33a8-fa60-485f-b470-496464e45c6b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-user-tp44z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=287b33a8-fa60-485f-b470-496464e45c6b;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=287b33a8-fa60-485f-b470-496464e45c6b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9e65624679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identity=515 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=287b33a8-fa60-485f-b470-496464e45c6b,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=287b33a8-fa60-485f-b470-496464e45c6b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-user-tp44z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e65624679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identity=515 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-user-tp44z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e65624679 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2257 identity=515 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-user-tp44z subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e65624679 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2257 identity=515 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-user-tp44z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d8fb7ff9ba endpointID=2891 k8sNamespace=openstack k8sPodName=barbican-db-init-nsx62 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3629f070-073a-4236-b231-4d4c15617905 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=3629f070-073a-4236-b231-4d4c15617905 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d8fb7ff9ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2891 identity=50702 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-nsx62 subsys=endpoint level=info msg="Delete endpoint request" containerID=0d13f644eb endpointID=2524 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-crt4q subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=fba0bbce-8260-4348-bce6-5ff3b61f7b2d k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=fba0bbce-8260-4348-bce6-5ff3b61f7b2d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=0d13f644eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2524 identity=38113 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rook-ceph-detect-version-crt4q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 9a4314c2-82c3-4190-aa5b-2d152814b574 default }" containerID=6dd1f441a7f10a3376f9c2e9a7daaaa91e8f5be51429443345473739a84b9a67 datapathConfiguration="&{false false false false false }" interface=lxccc9e81441895 k8sPodName=openstack/barbican-db-sync-lns2r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6dd1f441a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/barbican-db-sync-lns2r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6dd1f441a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=afeedc85-80f9-43cd-b237-5fb2d47bf6c7,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=afeedc85-80f9-43cd-b237-5fb2d47bf6c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/barbican-db-sync-lns2r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=afeedc85-80f9-43cd-b237-5fb2d47bf6c7;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=afeedc85-80f9-43cd-b237-5fb2d47bf6c7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6dd1f441a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identity=34230 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=afeedc85-80f9-43cd-b237-5fb2d47bf6c7,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=afeedc85-80f9-43cd-b237-5fb2d47bf6c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/barbican-db-sync-lns2r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6dd1f441a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identity=34230 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/barbican-db-sync-lns2r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6dd1f441a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=457 identity=34230 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/barbican-db-sync-lns2r subsys=endpoint level=info msg="Successful endpoint creation" containerID=6dd1f441a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=457 identity=34230 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/barbican-db-sync-lns2r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6a7d65a449 endpointID=838 k8sNamespace=openstack k8sPodName=heat-db-sync-j9vs5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=a451791e-b346-4f51-93dc-5c29c2213f71 k8s:batch.kubernetes.io/job-name=heat-db-sync k8s:component=db-sync k8s:controller-uid=a451791e-b346-4f51-93dc-5c29c2213f71 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-sync k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=6a7d65a449 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=838 identity=33842 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-db-sync-j9vs5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 814a4b8e-5295-4c26-9f1f-704c453f931d default }" containerID=ad823007894296c654d9918436b2df74cb84756fbeafc22ac62a6b8866ac0789 datapathConfiguration="&{false false false false false }" interface=lxc6ce251fb7848 k8sPodName=openstack/heat-rabbit-init-hbz8h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad82300789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=695 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/heat-rabbit-init-hbz8h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad82300789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=695 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=2899b1fa-c045-4c9e-af1a-5ebd1671c718,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2899b1fa-c045-4c9e-af1a-5ebd1671c718,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/heat-rabbit-init-hbz8h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ad82300789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=695 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=openstack/heat-rabbit-init-hbz8h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=2899b1fa-c045-4c9e-af1a-5ebd1671c718;k8s:batch.kubernetes.io/job-name=heat-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2899b1fa-c045-4c9e-af1a-5ebd1671c718;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-rabbit-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad82300789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=695 identity=7168 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=2899b1fa-c045-4c9e-af1a-5ebd1671c718,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2899b1fa-c045-4c9e-af1a-5ebd1671c718,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/heat-rabbit-init-hbz8h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad82300789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=695 identity=7168 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/heat-rabbit-init-hbz8h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad82300789 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=695 identity=7168 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/heat-rabbit-init-hbz8h subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad82300789 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=695 identity=7168 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/heat-rabbit-init-hbz8h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 7ba213be-31b1-4cdd-b45b-70616fdfc390 default }" containerID=e67d21245d7e91b8bf370739fcc78d9e298f070138735527c5e4572262a5c716 datapathConfiguration="&{false false false false false }" interface=lxc68ee923d76d3 k8sPodName=openstack/ceph-object-controller-detect-version-n96fw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e67d21245d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3484 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n96fw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e67d21245d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3484 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=327da2cc-50d3-4a8d-bad7-110eab51c708,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=327da2cc-50d3-4a8d-bad7-110eab51c708,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n96fw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e67d21245d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3484 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n96fw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=327da2cc-50d3-4a8d-bad7-110eab51c708;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=327da2cc-50d3-4a8d-bad7-110eab51c708;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e67d21245d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3484 identity=16408 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=327da2cc-50d3-4a8d-bad7-110eab51c708,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=327da2cc-50d3-4a8d-bad7-110eab51c708,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n96fw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e67d21245d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3484 identity=16408 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n96fw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e67d21245d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3484 identity=16408 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n96fw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e67d21245d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3484 identity=16408 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n96fw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad82300789 endpointID=695 k8sNamespace=openstack k8sPodName=heat-rabbit-init-hbz8h subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=2899b1fa-c045-4c9e-af1a-5ebd1671c718 k8s:batch.kubernetes.io/job-name=heat-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2899b1fa-c045-4c9e-af1a-5ebd1671c718 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-rabbit-init k8s:release_group=heat]" subsys=allocator level=info msg="Delete endpoint request" containerID=e67d21245d endpointID=3484 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-n96fw subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=327da2cc-50d3-4a8d-bad7-110eab51c708 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=327da2cc-50d3-4a8d-bad7-110eab51c708 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=ad82300789 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=695 identity=7168 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/heat-rabbit-init-hbz8h subsys=endpoint level=info msg="Removed endpoint" containerID=e67d21245d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3484 identity=16408 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n96fw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 d151d160-baf0-4290-87e0-a654e69ccd61 default }" containerID=fe36e4123efce473f055473e26453f134799baf5540c74859f3ce64865b5ee30 datapathConfiguration="&{false false false false false }" interface=lxca2972003509e k8sPodName=openstack/heat-ks-service-4r54s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe36e4123e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-ks-service-4r54s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe36e4123e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=ffdbb61d-52a4-43dc-ac08-58719d39e687,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=ffdbb61d-52a4-43dc-ac08-58719d39e687,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-ks-service-4r54s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=ffdbb61d-52a4-43dc-ac08-58719d39e687;k8s:batch.kubernetes.io/job-name=heat-ks-service;k8s:component=ks-service;k8s:controller-uid=ffdbb61d-52a4-43dc-ac08-58719d39e687;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-service;k8s:release_group=heat;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fe36e4123e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-ks-service-4r54s line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fe36e4123e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identity=3584 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=ffdbb61d-52a4-43dc-ac08-58719d39e687,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=ffdbb61d-52a4-43dc-ac08-58719d39e687,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-ks-service-4r54s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe36e4123e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identity=3584 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-ks-service-4r54s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe36e4123e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2446 identity=3584 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-ks-service-4r54s subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe36e4123e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2446 identity=3584 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-ks-service-4r54s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec69944ecc endpointID=2365 k8sNamespace=openstack k8sPodName=cinder-db-sync-mg4d2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=bb31c52c-c722-4d05-a0d8-edc36bcfc023 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=bb31c52c-c722-4d05-a0d8-edc36bcfc023 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Delete endpoint request" containerID=9e65624679 endpointID=2257 k8sNamespace=openstack k8sPodName=placement-ks-user-tp44z subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=287b33a8-fa60-485f-b470-496464e45c6b k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=287b33a8-fa60-485f-b470-496464e45c6b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=ec69944ecc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2365 identity=12029 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-db-sync-mg4d2 subsys=endpoint level=info msg="Removed endpoint" containerID=9e65624679 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2257 identity=515 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-user-tp44z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 63c82baf-ffc6-4cfe-8cfd-85aa0fb3b5e3 default }" containerID=e3bac0d3c005592b0ece0b0ba8b8c7611e31077697353a2940976df69eac05ca datapathConfiguration="&{false false false false false }" interface=lxc666610a77807 k8sPodName=openstack/placement-ks-endpoints-s67dz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3bac0d3c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-ks-endpoints-s67dz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3bac0d3c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3b190f10-0ee6-4f8f-a661-31e245417e19,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3b190f10-0ee6-4f8f-a661-31e245417e19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-ks-endpoints-s67dz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=3b190f10-0ee6-4f8f-a661-31e245417e19;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3b190f10-0ee6-4f8f-a661-31e245417e19;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3bac0d3c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=32484 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3b190f10-0ee6-4f8f-a661-31e245417e19,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3b190f10-0ee6-4f8f-a661-31e245417e19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-ks-endpoints-s67dz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3bac0d3c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=32484 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-ks-endpoints-s67dz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.62 937b2e80-e19b-4758-b1fb-fcfc530f126c default }" containerID=64c1bec2e8fab09f12cd18d5294cdf85932f65f89b94eb0d3022835115683acb datapathConfiguration="&{false false false false false }" interface=lxcd66906ad6fdb k8sPodName=openstack/cinder-rabbit-init-vvmt2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64c1bec2e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-vvmt2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64c1bec2e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=6d60ae3d-f19d-4a91-b27b-e5c65fb3e3fb,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6d60ae3d-f19d-4a91-b27b-e5c65fb3e3fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-vvmt2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=6d60ae3d-f19d-4a91-b27b-e5c65fb3e3fb;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6d60ae3d-f19d-4a91-b27b-e5c65fb3e3fb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64c1bec2e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identity=33162 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=6d60ae3d-f19d-4a91-b27b-e5c65fb3e3fb,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6d60ae3d-f19d-4a91-b27b-e5c65fb3e3fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-vvmt2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64c1bec2e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identity=33162 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-vvmt2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3bac0d3c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1380 identity=32484 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-ks-endpoints-s67dz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3bac0d3c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1380 identity=32484 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-ks-endpoints-s67dz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=64c1bec2e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1761 identity=33162 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-vvmt2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=64c1bec2e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1761 identity=33162 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-vvmt2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5bc716bf51 endpointID=101 k8sNamespace=openstack k8sPodName=glance-db-sync-pl885 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=212113dd-6bd3-4724-b09b-d6e4abb10a85 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=212113dd-6bd3-4724-b09b-d6e4abb10a85 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5bc716bf51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=101 identity=41409 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-pl885 subsys=endpoint level=info msg="Delete endpoint request" containerID=64c1bec2e8 endpointID=1761 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-vvmt2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=6d60ae3d-f19d-4a91-b27b-e5c65fb3e3fb k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6d60ae3d-f19d-4a91-b27b-e5c65fb3e3fb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=64c1bec2e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1761 identity=33162 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-rabbit-init-vvmt2 subsys=endpoint level=info msg="Delete endpoint request" containerID=6dd1f441a7 endpointID=457 k8sNamespace=openstack k8sPodName=barbican-db-sync-lns2r subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=afeedc85-80f9-43cd-b237-5fb2d47bf6c7 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=afeedc85-80f9-43cd-b237-5fb2d47bf6c7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6dd1f441a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=457 identity=34230 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/barbican-db-sync-lns2r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 306cbc14-73d4-4051-8fd1-bc2134c8d000 default }" containerID=129263397e07e3c1427f6d8250a1f32d1c43004e51b72c582dbf12feb27c2008 datapathConfiguration="&{false false false false false }" interface=lxcb64324a4a874 k8sPodName=openstack/cinder-ks-service-6r4jx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=129263397e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/cinder-ks-service-6r4jx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=129263397e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=adda6d29-9004-4451-967b-f95afe969983,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=adda6d29-9004-4451-967b-f95afe969983,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/cinder-ks-service-6r4jx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=adda6d29-9004-4451-967b-f95afe969983;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=adda6d29-9004-4451-967b-f95afe969983;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=129263397e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identity=31219 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=adda6d29-9004-4451-967b-f95afe969983,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=adda6d29-9004-4451-967b-f95afe969983,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/cinder-ks-service-6r4jx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=129263397e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identity=31219 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/cinder-ks-service-6r4jx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.125 3af45a6f-661c-4477-9de0-662a632e001a default }" containerID=09241fe0c928cbb46dbf4f1bb9b2fa7101d4aaffdea164745f34eb7e6dd5e849 datapathConfiguration="&{false false false false false }" interface=lxc3a93a5f0d33c k8sPodName=openstack/glance-rabbit-init-9gkvf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09241fe0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-rabbit-init-9gkvf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09241fe0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3218bfc3-e558-4fab-bb63-521ead37e6c8,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3218bfc3-e558-4fab-bb63-521ead37e6c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-rabbit-init-9gkvf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3218bfc3-e558-4fab-bb63-521ead37e6c8;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3218bfc3-e558-4fab-bb63-521ead37e6c8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09241fe0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identity=14577 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3218bfc3-e558-4fab-bb63-521ead37e6c8,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3218bfc3-e558-4fab-bb63-521ead37e6c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-rabbit-init-9gkvf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09241fe0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identity=14577 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-rabbit-init-9gkvf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 b1a43b0f-27d3-48a2-9d37-511836623907 default }" containerID=4e32c1b7bcaa83021e8628ab4dc28fd39cd34fb73a596bcd5a6d2d1a97a2f659 datapathConfiguration="&{false false false false false }" interface=lxc1b97e3facfc6 k8sPodName=monitoring/kube-prometheus-stack-admission-create-tkxpd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e32c1b7bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tkxpd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e32c1b7bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=4a7a294a-9d1d-4781-8f78-adcffa50bb4f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4a7a294a-9d1d-4781-8f78-adcffa50bb4f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tkxpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=4a7a294a-9d1d-4781-8f78-adcffa50bb4f;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=4a7a294a-9d1d-4781-8f78-adcffa50bb4f;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e32c1b7bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=22100 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=4a7a294a-9d1d-4781-8f78-adcffa50bb4f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4a7a294a-9d1d-4781-8f78-adcffa50bb4f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tkxpd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e32c1b7bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=22100 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tkxpd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=129263397e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=353 identity=31219 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/cinder-ks-service-6r4jx subsys=endpoint level=info msg="Successful endpoint creation" containerID=129263397e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=353 identity=31219 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/cinder-ks-service-6r4jx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=09241fe0c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=443 identity=14577 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-rabbit-init-9gkvf subsys=endpoint level=info msg="Successful endpoint creation" containerID=09241fe0c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=443 identity=14577 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-rabbit-init-9gkvf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4e32c1b7bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=812 identity=22100 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tkxpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e32c1b7bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=812 identity=22100 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tkxpd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.180 ff6c893f-edf8-42fd-9d7e-2914c84149fd default }" containerID=8911156f3e69c7cf4eab907cd19d40707a940990a03ec7f74b6609491c2d8dcc datapathConfiguration="&{false false false false false }" interface=lxc219cab5c69a2 k8sPodName=openstack/barbican-rabbit-init-9mq7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8911156f3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1637 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-rabbit-init-9mq7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8911156f3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1637 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fce4b203-cb4e-408b-92ca-2b66ccfcc5cf,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fce4b203-cb4e-408b-92ca-2b66ccfcc5cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-rabbit-init-9mq7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=fce4b203-cb4e-408b-92ca-2b66ccfcc5cf;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=fce4b203-cb4e-408b-92ca-2b66ccfcc5cf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8911156f3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1637 identity=22361 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fce4b203-cb4e-408b-92ca-2b66ccfcc5cf,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fce4b203-cb4e-408b-92ca-2b66ccfcc5cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-rabbit-init-9mq7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8911156f3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1637 identity=22361 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-rabbit-init-9mq7b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8911156f3e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1637 identity=22361 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-rabbit-init-9mq7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=8911156f3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1637 identity=22361 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-rabbit-init-9mq7b subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e32c1b7bc endpointID=812 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-tkxpd subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=4a7a294a-9d1d-4781-8f78-adcffa50bb4f k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=4a7a294a-9d1d-4781-8f78-adcffa50bb4f k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=4e32c1b7bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=812 identity=22100 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tkxpd subsys=endpoint level=info msg="Delete endpoint request" containerID=09241fe0c9 endpointID=443 k8sNamespace=openstack k8sPodName=glance-rabbit-init-9gkvf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3218bfc3-e558-4fab-bb63-521ead37e6c8 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3218bfc3-e558-4fab-bb63-521ead37e6c8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Delete endpoint request" containerID=fe36e4123e endpointID=2446 k8sNamespace=openstack k8sPodName=heat-ks-service-4r54s subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=ffdbb61d-52a4-43dc-ac08-58719d39e687 k8s:batch.kubernetes.io/job-name=heat-ks-service k8s:component=ks-service k8s:controller-uid=ffdbb61d-52a4-43dc-ac08-58719d39e687 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-service k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=09241fe0c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=443 identity=14577 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-rabbit-init-9gkvf subsys=endpoint level=info msg="Removed endpoint" containerID=fe36e4123e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2446 identity=3584 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/heat-ks-service-4r54s subsys=endpoint level=info msg="Delete endpoint request" containerID=8911156f3e endpointID=1637 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-9mq7b subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=fce4b203-cb4e-408b-92ca-2b66ccfcc5cf k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=fce4b203-cb4e-408b-92ca-2b66ccfcc5cf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8911156f3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1637 identity=22361 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-rabbit-init-9mq7b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 89702e4c-5d1c-483c-967e-ed2ba1e046e0 default }" containerID=41add9b2f8a84a130c4073492d089c5c4db4051d461ec15b4933e89d93e91ac7 datapathConfiguration="&{false false false false false }" interface=lxcc1cc79477664 k8sPodName=openstack/heat-ks-endpoints-6kjjq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41add9b2f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/heat-ks-endpoints-6kjjq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41add9b2f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=7a6bb1a0-3605-4c3b-838e-942f4ee0a015,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7a6bb1a0-3605-4c3b-838e-942f4ee0a015,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/heat-ks-endpoints-6kjjq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=7a6bb1a0-3605-4c3b-838e-942f4ee0a015;k8s:batch.kubernetes.io/job-name=heat-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7a6bb1a0-3605-4c3b-838e-942f4ee0a015;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-endpoints;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41add9b2f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identity=582 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=7a6bb1a0-3605-4c3b-838e-942f4ee0a015,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7a6bb1a0-3605-4c3b-838e-942f4ee0a015,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/heat-ks-endpoints-6kjjq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41add9b2f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identity=582 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/heat-ks-endpoints-6kjjq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 423c5033-51bf-4e7f-b6fb-fb151f320f75 default }" containerID=043f2653a3393d13e694db8f35cc4b935ea76b8f19dbbd91f07f566509d37600 datapathConfiguration="&{false false false false false }" interface=lxc822306232747 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qnc8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=043f2653a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qnc8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=043f2653a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qnc8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=043f2653a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 identity=54338 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qnc8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=043f2653a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 identity=54338 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qnc8x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41add9b2f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1273 identity=582 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/heat-ks-endpoints-6kjjq subsys=endpoint level=info msg="Successful endpoint creation" containerID=41add9b2f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1273 identity=582 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/heat-ks-endpoints-6kjjq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.196 9859cca9-fa43-439a-9883-67380b60ff91 default }" containerID=58b75fe06be96ed146092318cd2438a212a317c0be77207d26f3c427a15beeb3 datapathConfiguration="&{false false false false false }" interface=lxce78fe9afaa98 k8sPodName=monitoring/kube-prometheus-stack-grafana-7b85567f6c-szn8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58b75fe06b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b85567f6c-szn8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58b75fe06b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b85567f6c-szn8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58b75fe06b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=1178 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b85567f6c-szn8m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58b75fe06b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=1178 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b85567f6c-szn8m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=043f2653a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1351 identity=54338 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qnc8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=043f2653a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1351 identity=54338 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qnc8x subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.68 2e7dff4a-a433-48eb-b943-cd7962d872cc default }" containerID=473dd3426505a32b8b08be6f6c8a0615a03b9397df0f9ce0369194981c19b539 datapathConfiguration="&{false false false false false }" interface=lxc600dad9049ee k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-f7287 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=473dd34265 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1323 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-f7287 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=473dd34265 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1323 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-f7287 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=473dd34265 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1323 identity=24547 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-f7287 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=473dd34265 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1323 identity=24547 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-f7287 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58b75fe06b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=311 identity=1178 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b85567f6c-szn8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=58b75fe06b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=311 identity=1178 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b85567f6c-szn8m subsys=daemon level=info msg="Delete endpoint request" containerID=e3bac0d3c0 endpointID=1380 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-s67dz subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=3b190f10-0ee6-4f8f-a661-31e245417e19 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3b190f10-0ee6-4f8f-a661-31e245417e19 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=e3bac0d3c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1380 identity=32484 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-ks-endpoints-s67dz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=473dd34265 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1323 identity=24547 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-f7287 subsys=endpoint level=info msg="Successful endpoint creation" containerID=473dd34265 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1323 identity=24547 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-f7287 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.37 9fc0d545-e9d3-440a-9f1c-bff3b13c82f9 default }" containerID=cc8b3be02f79a26c0a8e6cde446d6e5cbcdc5848922fbf420ccfcccc8aca6a44 datapathConfiguration="&{false false false false false }" interface=lxccd8eaad0dd89 k8sPodName=openstack/glance-ks-service-d68bh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc8b3be02f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-ks-service-d68bh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc8b3be02f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d10c444d-644c-4ea7-b282-d92f8ef96755,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=d10c444d-644c-4ea7-b282-d92f8ef96755,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-ks-service-d68bh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d10c444d-644c-4ea7-b282-d92f8ef96755;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=d10c444d-644c-4ea7-b282-d92f8ef96755;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc8b3be02f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identity=29938 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d10c444d-644c-4ea7-b282-d92f8ef96755,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=d10c444d-644c-4ea7-b282-d92f8ef96755,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-ks-service-d68bh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc8b3be02f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identity=29938 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-ks-service-d68bh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc8b3be02f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2737 identity=29938 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-ks-service-d68bh subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc8b3be02f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2737 identity=29938 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-ks-service-d68bh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.8 75904e48-77b7-4c41-940d-1856fa4cbf3c default }" containerID=6c9bbcbb8a53f8370b31d95e7b29d8147577c68f9b7bba955f09796d9e3eb878 datapathConfiguration="&{false false false false false }" interface=lxcdc2ee52d9d9f k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g2r78 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c9bbcbb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g2r78 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c9bbcbb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=49d6eb17-0e06-4aed-9b41-5f95fffb96bb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=49d6eb17-0e06-4aed-9b41-5f95fffb96bb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g2r78 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=49d6eb17-0e06-4aed-9b41-5f95fffb96bb;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=49d6eb17-0e06-4aed-9b41-5f95fffb96bb;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c9bbcbb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identity=6572 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=49d6eb17-0e06-4aed-9b41-5f95fffb96bb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=49d6eb17-0e06-4aed-9b41-5f95fffb96bb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g2r78 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c9bbcbb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identity=6572 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g2r78 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c9bbcbb8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=845 identity=6572 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g2r78 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c9bbcbb8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=845 identity=6572 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g2r78 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.88 e202ecb7-dca5-4525-9049-13a743871107 default }" containerID=d7763d7cf065350cd2eb973af1bb8a0d7411012e13e5682a68e21ce860f7f48e datapathConfiguration="&{false false false false false }" interface=lxcc012a4f4de2c k8sPodName=openstack/barbican-ks-service-ljgrf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7763d7cf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-ks-service-ljgrf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7763d7cf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=223de1db-52a7-41f9-98e0-4099ca601ab6,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=223de1db-52a7-41f9-98e0-4099ca601ab6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-ks-service-ljgrf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=223de1db-52a7-41f9-98e0-4099ca601ab6;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=223de1db-52a7-41f9-98e0-4099ca601ab6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7763d7cf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=24118 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=223de1db-52a7-41f9-98e0-4099ca601ab6,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=223de1db-52a7-41f9-98e0-4099ca601ab6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-ks-service-ljgrf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7763d7cf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=24118 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-ks-service-ljgrf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d7763d7cf0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=57 identity=24118 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-ks-service-ljgrf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7763d7cf0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=57 identity=24118 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-ks-service-ljgrf subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.178 24b59560-69fd-4260-8809-d69787f50d6f default }" containerID=77432af5e6422de99bdd8b7f412b59f59c53c3169d380fbc2c02150ed1aa6c99 datapathConfiguration="&{false false false false false }" interface=lxc5a7f4240ff94 k8sPodName=local-path-storage/helper-pod-create-pvc-13afebaf-9793-40d6-93da-cfa5224d1ccb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77432af5e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3570 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13afebaf-9793-40d6-93da-cfa5224d1ccb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77432af5e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3570 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13afebaf-9793-40d6-93da-cfa5224d1ccb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77432af5e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3570 identity=65072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13afebaf-9793-40d6-93da-cfa5224d1ccb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77432af5e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3570 identity=65072 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13afebaf-9793-40d6-93da-cfa5224d1ccb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77432af5e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3570 identity=65072 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13afebaf-9793-40d6-93da-cfa5224d1ccb subsys=endpoint level=info msg="Successful endpoint creation" containerID=77432af5e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3570 identity=65072 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13afebaf-9793-40d6-93da-cfa5224d1ccb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.167 992f7cf4-3885-443f-ad3e-eb99e56567a5 default }" containerID=ec90ffe1411a2ca572ea7b83994834dae84c617a116229c419e30c81104713f9 datapathConfiguration="&{false false false false false }" interface=lxc64aa0219158a k8sPodName=local-path-storage/helper-pod-create-pvc-d5210c98-a2b4-4a0e-a70e-dba09555c9ee labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec90ffe141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d5210c98-a2b4-4a0e-a70e-dba09555c9ee subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec90ffe141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d5210c98-a2b4-4a0e-a70e-dba09555c9ee subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ec90ffe141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=65072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d5210c98-a2b4-4a0e-a70e-dba09555c9ee oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec90ffe141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=65072 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d5210c98-a2b4-4a0e-a70e-dba09555c9ee subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec90ffe141 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=476 identity=65072 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d5210c98-a2b4-4a0e-a70e-dba09555c9ee subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec90ffe141 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=476 identity=65072 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d5210c98-a2b4-4a0e-a70e-dba09555c9ee subsys=daemon level=info msg="Delete endpoint request" containerID=6c9bbcbb8a endpointID=845 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-g2r78 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=49d6eb17-0e06-4aed-9b41-5f95fffb96bb k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=49d6eb17-0e06-4aed-9b41-5f95fffb96bb k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6c9bbcbb8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=845 identity=6572 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g2r78 subsys=endpoint level=info msg="Delete endpoint request" containerID=77432af5e6 endpointID=3570 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-13afebaf-9793-40d6-93da-cfa5224d1ccb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=77432af5e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3570 identity=65072 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13afebaf-9793-40d6-93da-cfa5224d1ccb subsys=endpoint level=info msg="Delete endpoint request" containerID=ec90ffe141 endpointID=476 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d5210c98-a2b4-4a0e-a70e-dba09555c9ee subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ec90ffe141 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=476 identity=65072 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d5210c98-a2b4-4a0e-a70e-dba09555c9ee subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 c66e1be5-a91a-45fb-90ba-b86ae66dc113 default }" containerID=21afc82daeb1079559618709d633bfd568f95c548bc2a90277be066abf7aa677 datapathConfiguration="&{false false false false false }" interface=lxc050c6b8cc57b k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21afc82dae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21afc82dae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21afc82dae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identity=26369 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21afc82dae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identity=26369 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=21afc82dae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2344 identity=26369 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=21afc82dae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2344 identity=26369 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.231 bf66a7bd-f11d-4812-8727-d52f63e76b16 default }" containerID=c4f2ba4535faa4a282a07cd43530468e4af30bebcd743f174d27164e0c8ec01b datapathConfiguration="&{false false false false false }" interface=lxc39c8788fe013 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4f2ba4535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4f2ba4535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4f2ba4535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identity=6693 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4f2ba4535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identity=6693 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c4f2ba4535 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1876 identity=6693 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4f2ba4535 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1876 identity=6693 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.100 fa4b4ec8-c470-4375-ba79-b320c95c9fe3 default }" containerID=1d5dcfe1966aa6cde1a1f205f53a17b0b33718ff325ecfd120ab8163508a36ad datapathConfiguration="&{false false false false false }" interface=lxc528c315df873 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7r6kg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d5dcfe196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7r6kg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d5dcfe196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7r6kg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Delete endpoint request" containerID=129263397e endpointID=353 k8sNamespace=openstack k8sPodName=cinder-ks-service-6r4jx subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=adda6d29-9004-4451-967b-f95afe969983 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=adda6d29-9004-4451-967b-f95afe969983 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1d5dcfe196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7r6kg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d5dcfe196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 identity=24748 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7r6kg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d5dcfe196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 identity=24748 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7r6kg subsys=endpoint level=info msg="Removed endpoint" containerID=129263397e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=353 identity=31219 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/cinder-ks-service-6r4jx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d5dcfe196 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2692 identity=24748 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7r6kg subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d5dcfe196 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2692 identity=24748 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7r6kg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.99 0074c06d-71f0-4e90-b924-c5855288ecb2 default }" containerID=668695988f523aad312068b6993e0307788fa0f7b9bf1e4e1941816e8a376ff6 datapathConfiguration="&{false false false false false }" interface=lxc1ab9eee74edf k8sPodName=openstack/cinder-ks-endpoints-9bcm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=668695988f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9bcm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=668695988f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=efb5aa84-8d10-412b-987c-9e63138c5302,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=efb5aa84-8d10-412b-987c-9e63138c5302,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9bcm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=efb5aa84-8d10-412b-987c-9e63138c5302;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=efb5aa84-8d10-412b-987c-9e63138c5302;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=668695988f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identity=8585 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=efb5aa84-8d10-412b-987c-9e63138c5302,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=efb5aa84-8d10-412b-987c-9e63138c5302,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9bcm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=668695988f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identity=8585 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9bcm8 subsys=endpoint level=info msg="Delete endpoint request" containerID=41add9b2f8 endpointID=1273 k8sNamespace=openstack k8sPodName=heat-ks-endpoints-6kjjq subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=7a6bb1a0-3605-4c3b-838e-942f4ee0a015 k8s:batch.kubernetes.io/job-name=heat-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7a6bb1a0-3605-4c3b-838e-942f4ee0a015 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-endpoints k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=41add9b2f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1273 identity=582 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/heat-ks-endpoints-6kjjq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=668695988f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=175 identity=8585 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9bcm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=668695988f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=175 identity=8585 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9bcm8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.29 15994e46-9455-4783-abc2-b196b62a904d default }" containerID=37bbe153d277d691ff216da3c67ef867f420e03f812d50719e0305161260fdea datapathConfiguration="&{false false false false false }" interface=lxc32725babaa80 k8sPodName=openstack/heat-ks-user-g2sh8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37bbe153d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/heat-ks-user-g2sh8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37bbe153d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=809d9092-3d0c-4e8f-85dd-e7d96aafdafb,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=809d9092-3d0c-4e8f-85dd-e7d96aafdafb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/heat-ks-user-g2sh8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=37bbe153d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=openstack/heat-ks-user-g2sh8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=809d9092-3d0c-4e8f-85dd-e7d96aafdafb;k8s:batch.kubernetes.io/job-name=heat-ks-user;k8s:component=ks-user;k8s:controller-uid=809d9092-3d0c-4e8f-85dd-e7d96aafdafb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37bbe153d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identity=9621 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=809d9092-3d0c-4e8f-85dd-e7d96aafdafb,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=809d9092-3d0c-4e8f-85dd-e7d96aafdafb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/heat-ks-user-g2sh8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37bbe153d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identity=9621 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/heat-ks-user-g2sh8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37bbe153d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1072 identity=9621 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/heat-ks-user-g2sh8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=37bbe153d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1072 identity=9621 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/heat-ks-user-g2sh8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 1e8ff465-b725-49d7-8df6-7c58148624c3 default }" containerID=cdd43b4e0d648ef434c6d4169f6ee978d8d39388a5bde285fd6bc57f38dd3fe6 datapathConfiguration="&{false false false false false }" interface=lxc7218fe496291 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vg5m7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdd43b4e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vg5m7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdd43b4e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vg5m7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cdd43b4e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vg5m7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdd43b4e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 identity=38168 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vg5m7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdd43b4e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 identity=38168 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vg5m7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 c1a8360c-92a7-44dc-a5d8-cff403720a6e default }" containerID=710c33ab94aa67e9477e46d09238e87c9297ad35e5725a8425751796c676125e datapathConfiguration="&{false false false false false }" interface=lxc0e85136832c6 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pktz5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=710c33ab94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pktz5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=710c33ab94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pktz5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=710c33ab94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identity=14715 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pktz5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=710c33ab94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identity=14715 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pktz5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cdd43b4e0d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1295 identity=38168 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vg5m7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdd43b4e0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1295 identity=38168 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vg5m7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=710c33ab94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=615 identity=14715 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pktz5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=710c33ab94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=615 identity=14715 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pktz5 subsys=daemon level=info msg="Delete endpoint request" containerID=cc8b3be02f endpointID=2737 k8sNamespace=openstack k8sPodName=glance-ks-service-d68bh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d10c444d-644c-4ea7-b282-d92f8ef96755 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=d10c444d-644c-4ea7-b282-d92f8ef96755 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Removed endpoint" containerID=cc8b3be02f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2737 identity=29938 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-ks-service-d68bh subsys=endpoint level=info msg="Delete endpoint request" containerID=d7763d7cf0 endpointID=57 k8sNamespace=openstack k8sPodName=barbican-ks-service-ljgrf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=223de1db-52a7-41f9-98e0-4099ca601ab6 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=223de1db-52a7-41f9-98e0-4099ca601ab6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d7763d7cf0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=57 identity=24118 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-ks-service-ljgrf subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 9c916985-5745-4fe2-8333-2c2302ebc7d5 default }" containerID=e0e249802d6ba65eebe05a9cf652b48dcdb83e0771397418cc48d72022edfade datapathConfiguration="&{false false false false false }" interface=lxc6a5b08112869 k8sPodName=openstack/glance-ks-endpoints-5vcld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0e249802d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-endpoints-5vcld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0e249802d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a0b77bc-6318-47a9-8d00-c278e3824aa6,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4a0b77bc-6318-47a9-8d00-c278e3824aa6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-endpoints-5vcld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4a0b77bc-6318-47a9-8d00-c278e3824aa6;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=4a0b77bc-6318-47a9-8d00-c278e3824aa6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0e249802d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identity=51927 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a0b77bc-6318-47a9-8d00-c278e3824aa6,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4a0b77bc-6318-47a9-8d00-c278e3824aa6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-endpoints-5vcld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0e249802d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identity=51927 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-endpoints-5vcld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0e249802d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=300 identity=51927 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-endpoints-5vcld subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0e249802d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=300 identity=51927 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-endpoints-5vcld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.77 8da21c44-f3d4-4efd-9f96-aacccc8260a4 default }" containerID=2a81407e5b1d7efdcaaf73b5d27519f7b722b3e3e6530e29cc9e7ff8d2e2202b datapathConfiguration="&{false false false false false }" interface=lxc552af7b11220 k8sPodName=openstack/barbican-ks-endpoints-gwjvc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a81407e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gwjvc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a81407e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cbaa4fcd-1d0a-42fb-b8fc-7d0f850a32d7,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cbaa4fcd-1d0a-42fb-b8fc-7d0f850a32d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gwjvc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cbaa4fcd-1d0a-42fb-b8fc-7d0f850a32d7;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=cbaa4fcd-1d0a-42fb-b8fc-7d0f850a32d7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a81407e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identity=54135 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cbaa4fcd-1d0a-42fb-b8fc-7d0f850a32d7,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cbaa4fcd-1d0a-42fb-b8fc-7d0f850a32d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gwjvc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a81407e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identity=54135 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gwjvc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a81407e5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=296 identity=54135 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gwjvc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a81407e5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=296 identity=54135 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gwjvc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=668695988f endpointID=175 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-9bcm8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=efb5aa84-8d10-412b-987c-9e63138c5302 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=efb5aa84-8d10-412b-987c-9e63138c5302 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=668695988f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=175 identity=8585 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9bcm8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 ba6f9f74-915f-456e-9e62-fb7ee6648213 default }" containerID=e90bbe9beb6e3706db9be1947995d1ba7823b318af08a7e38bc3add751a36960 datapathConfiguration="&{false false false false false }" interface=lxc322410927add k8sPodName=openstack/cinder-ks-user-nq4sc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e90bbe9beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-ks-user-nq4sc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e90bbe9beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8fc9b2a6-27cb-4477-bd5b-b14885626c71,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=8fc9b2a6-27cb-4477-bd5b-b14885626c71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-ks-user-nq4sc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8fc9b2a6-27cb-4477-bd5b-b14885626c71;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=8fc9b2a6-27cb-4477-bd5b-b14885626c71;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e90bbe9beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=14204 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8fc9b2a6-27cb-4477-bd5b-b14885626c71,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=8fc9b2a6-27cb-4477-bd5b-b14885626c71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-ks-user-nq4sc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e90bbe9beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=14204 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-ks-user-nq4sc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e90bbe9beb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1479 identity=14204 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-ks-user-nq4sc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e90bbe9beb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1479 identity=14204 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-ks-user-nq4sc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e0e249802d endpointID=300 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-5vcld subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4a0b77bc-6318-47a9-8d00-c278e3824aa6 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=4a0b77bc-6318-47a9-8d00-c278e3824aa6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e0e249802d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=300 identity=51927 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-endpoints-5vcld subsys=endpoint level=info msg="Delete endpoint request" containerID=2a81407e5b endpointID=296 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-gwjvc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cbaa4fcd-1d0a-42fb-b8fc-7d0f850a32d7 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=cbaa4fcd-1d0a-42fb-b8fc-7d0f850a32d7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2a81407e5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=296 identity=54135 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gwjvc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 43db1a8c-6af3-4899-a137-f8920ccde8ab default }" containerID=5ac56184c155520aea26b020fe2d67adbf4658adcd9140eef059bb82f8225657 datapathConfiguration="&{false false false false false }" interface=lxc7e384278382c k8sPodName=openstack/glance-ks-user-2frlb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ac56184c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=299 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-user-2frlb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ac56184c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=299 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3389589c-86ed-485b-a3d2-91ea52faaeb9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3389589c-86ed-485b-a3d2-91ea52faaeb9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-user-2frlb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3389589c-86ed-485b-a3d2-91ea52faaeb9;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=3389589c-86ed-485b-a3d2-91ea52faaeb9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ac56184c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=299 identity=32757 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3389589c-86ed-485b-a3d2-91ea52faaeb9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3389589c-86ed-485b-a3d2-91ea52faaeb9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-user-2frlb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ac56184c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=299 identity=32757 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-user-2frlb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5ac56184c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=299 identity=32757 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-user-2frlb subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ac56184c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=299 identity=32757 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-user-2frlb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.102 a07b67ae-3a5b-40e2-bb85-9c73a8b7181e default }" containerID=732fab563dbd0bbf3bbd6f5f2ce7f94814a2f01e053509787120cf8ed7c521a0 datapathConfiguration="&{false false false false false }" interface=lxcadb8da39849f k8sPodName=openstack/barbican-ks-user-dltnn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=732fab563d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-ks-user-dltnn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=732fab563d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b46a903c-2056-449c-8b2f-cbc879f59747,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b46a903c-2056-449c-8b2f-cbc879f59747,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-ks-user-dltnn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b46a903c-2056-449c-8b2f-cbc879f59747;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=b46a903c-2056-449c-8b2f-cbc879f59747;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=732fab563d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=6943 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b46a903c-2056-449c-8b2f-cbc879f59747,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b46a903c-2056-449c-8b2f-cbc879f59747,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-ks-user-dltnn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=732fab563d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=6943 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-ks-user-dltnn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=732fab563d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=972 identity=6943 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-ks-user-dltnn subsys=endpoint level=info msg="Successful endpoint creation" containerID=732fab563d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=972 identity=6943 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-ks-user-dltnn subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=37bbe153d2 endpointID=1072 k8sNamespace=openstack k8sPodName=heat-ks-user-g2sh8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=809d9092-3d0c-4e8f-85dd-e7d96aafdafb k8s:batch.kubernetes.io/job-name=heat-ks-user k8s:component=ks-user k8s:controller-uid=809d9092-3d0c-4e8f-85dd-e7d96aafdafb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=37bbe153d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1072 identity=9621 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/heat-ks-user-g2sh8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 30d89408-4db1-4358-8f17-f5f230e69ef9 default }" containerID=d738af3ee11cfd36bbc8f0c2a2d3625aae2ae5e46838dbf15f3b753473749efe datapathConfiguration="&{false false false false false }" interface=lxc08e6e35e9b32 k8sPodName=openstack/heat-bootstrap-zljw7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d738af3ee1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/heat-bootstrap-zljw7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d738af3ee1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=cc3b3169-101b-4a82-bf8f-c7e765f3c694,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=cc3b3169-101b-4a82-bf8f-c7e765f3c694,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/heat-bootstrap-zljw7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=cc3b3169-101b-4a82-bf8f-c7e765f3c694;k8s:batch.kubernetes.io/job-name=heat-bootstrap;k8s:component=bootstrap;k8s:controller-uid=cc3b3169-101b-4a82-bf8f-c7e765f3c694;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-bootstrap;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d738af3ee1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 identity=8411 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=cc3b3169-101b-4a82-bf8f-c7e765f3c694,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=cc3b3169-101b-4a82-bf8f-c7e765f3c694,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/heat-bootstrap-zljw7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d738af3ee1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 identity=8411 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/heat-bootstrap-zljw7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d738af3ee1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1144 identity=8411 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/heat-bootstrap-zljw7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d738af3ee1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1144 identity=8411 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/heat-bootstrap-zljw7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ac56184c1 endpointID=299 k8sNamespace=openstack k8sPodName=glance-ks-user-2frlb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3389589c-86ed-485b-a3d2-91ea52faaeb9 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=3389589c-86ed-485b-a3d2-91ea52faaeb9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5ac56184c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=299 identity=32757 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-user-2frlb subsys=endpoint level=info msg="Delete endpoint request" containerID=e90bbe9beb endpointID=1479 k8sNamespace=openstack k8sPodName=cinder-ks-user-nq4sc subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8fc9b2a6-27cb-4477-bd5b-b14885626c71 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=8fc9b2a6-27cb-4477-bd5b-b14885626c71 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Delete endpoint request" containerID=732fab563d endpointID=972 k8sNamespace=openstack k8sPodName=barbican-ks-user-dltnn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b46a903c-2056-449c-8b2f-cbc879f59747 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=b46a903c-2056-449c-8b2f-cbc879f59747 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e90bbe9beb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1479 identity=14204 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-ks-user-nq4sc subsys=endpoint level=info msg="Removed endpoint" containerID=732fab563d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=972 identity=6943 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-ks-user-dltnn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 e5382a22-1c5a-4601-b404-3e4ace73007e default }" containerID=3030768fe6628e8935f033d0d97e796444dc73d0cb1c6df65edb5e719ca08731 datapathConfiguration="&{false false false false false }" interface=lxceb4871b7c33b k8sPodName=openstack/glance-metadefs-load-fvbfd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3030768fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-fvbfd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3030768fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b9fe3a46-b9ff-4310-9bb5-1b25ade7f657,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b9fe3a46-b9ff-4310-9bb5-1b25ade7f657,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-fvbfd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b9fe3a46-b9ff-4310-9bb5-1b25ade7f657;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=b9fe3a46-b9ff-4310-9bb5-1b25ade7f657;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3030768fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identity=26254 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b9fe3a46-b9ff-4310-9bb5-1b25ade7f657,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b9fe3a46-b9ff-4310-9bb5-1b25ade7f657,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-fvbfd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3030768fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identity=26254 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-fvbfd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3030768fe6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3995 identity=26254 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-fvbfd subsys=endpoint level=info msg="Successful endpoint creation" containerID=3030768fe6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3995 identity=26254 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-fvbfd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.114 9d024581-0dc5-4d61-861a-1907b5adc36e default }" containerID=5158e4c33b59d14ecbe63d37606ab03c071b09074f773f73054176ec1feca3ec datapathConfiguration="&{false false false false false }" interface=lxca74776d76720 k8sPodName=openstack/cinder-backup-storage-init-x28c2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5158e4c33b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-backup-storage-init-x28c2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5158e4c33b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1df9597f-390e-4513-9ce4-265b5f8c1d4b,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=1df9597f-390e-4513-9ce4-265b5f8c1d4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-backup-storage-init-x28c2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1df9597f-390e-4513-9ce4-265b5f8c1d4b;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=1df9597f-390e-4513-9ce4-265b5f8c1d4b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5158e4c33b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identity=65413 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1df9597f-390e-4513-9ce4-265b5f8c1d4b,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=1df9597f-390e-4513-9ce4-265b5f8c1d4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-backup-storage-init-x28c2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5158e4c33b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identity=65413 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-backup-storage-init-x28c2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5158e4c33b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3386 identity=65413 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-backup-storage-init-x28c2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5158e4c33b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3386 identity=65413 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-backup-storage-init-x28c2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d738af3ee1 endpointID=1144 k8sNamespace=openstack k8sPodName=heat-bootstrap-zljw7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=cc3b3169-101b-4a82-bf8f-c7e765f3c694 k8s:batch.kubernetes.io/job-name=heat-bootstrap k8s:component=bootstrap k8s:controller-uid=cc3b3169-101b-4a82-bf8f-c7e765f3c694 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-bootstrap k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=d738af3ee1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1144 identity=8411 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/heat-bootstrap-zljw7 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.47 af8be25d-c9e3-4ef3-b71c-969957d8490a default }" containerID=4eb0a316dd643d37c7cc1f0a62299c7e838c33da354d8b0eddc8d24ab89738a4 datapathConfiguration="&{false false false false false }" interface=lxcf21297934ccd k8sPodName=openstack/heat-domain-ks-user-8dxvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4eb0a316dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/heat-domain-ks-user-8dxvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4eb0a316dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=affda268-1c45-4207-9f14-6949235fe651,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=affda268-1c45-4207-9f14-6949235fe651,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/heat-domain-ks-user-8dxvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4eb0a316dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=openstack/heat-domain-ks-user-8dxvw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=affda268-1c45-4207-9f14-6949235fe651;k8s:batch.kubernetes.io/job-name=heat-domain-ks-user;k8s:component=ks-user;k8s:controller-uid=affda268-1c45-4207-9f14-6949235fe651;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-domain-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4eb0a316dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identity=24477 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=affda268-1c45-4207-9f14-6949235fe651,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=affda268-1c45-4207-9f14-6949235fe651,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/heat-domain-ks-user-8dxvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4eb0a316dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identity=24477 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/heat-domain-ks-user-8dxvw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4eb0a316dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=83 identity=24477 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/heat-domain-ks-user-8dxvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4eb0a316dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=83 identity=24477 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/heat-domain-ks-user-8dxvw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3030768fe6 endpointID=3995 k8sNamespace=openstack k8sPodName=glance-metadefs-load-fvbfd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b9fe3a46-b9ff-4310-9bb5-1b25ade7f657 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=b9fe3a46-b9ff-4310-9bb5-1b25ade7f657 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3030768fe6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3995 identity=26254 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-fvbfd subsys=endpoint level=info msg="Delete endpoint request" containerID=5158e4c33b endpointID=3386 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-x28c2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1df9597f-390e-4513-9ce4-265b5f8c1d4b k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=1df9597f-390e-4513-9ce4-265b5f8c1d4b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=5158e4c33b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3386 identity=65413 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-backup-storage-init-x28c2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 444b6d85-0393-40a4-9617-f111affba8d9 default }" containerID=41fdbcd285c93fb5598dce1f0dc27825b264a73066912184745ed859d1f9f797 datapathConfiguration="&{false false false false false }" interface=lxcfb177adb9af3 k8sPodName=openstack/glance-storage-init-rh7pk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41fdbcd285 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1860 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-rh7pk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41fdbcd285 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1860 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a577d10e-1cf6-4d24-a0bf-628b057ccb83,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a577d10e-1cf6-4d24-a0bf-628b057ccb83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-rh7pk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a577d10e-1cf6-4d24-a0bf-628b057ccb83;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=a577d10e-1cf6-4d24-a0bf-628b057ccb83;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41fdbcd285 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1860 identity=50786 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a577d10e-1cf6-4d24-a0bf-628b057ccb83,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a577d10e-1cf6-4d24-a0bf-628b057ccb83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-rh7pk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41fdbcd285 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1860 identity=50786 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-rh7pk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41fdbcd285 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1860 identity=50786 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-rh7pk subsys=endpoint level=info msg="Successful endpoint creation" containerID=41fdbcd285 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1860 identity=50786 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-rh7pk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.171 fd25bc96-7fc8-4bfb-b6a1-70019c8d4d76 default }" containerID=284b541679fb331bbed20cc7a0e7665d9f167331a9d142898b42799f927f4093 datapathConfiguration="&{false false false false false }" interface=lxc4da34d465ebc k8sPodName=openstack/cinder-create-internal-tenant-6vtgk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=284b541679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6vtgk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=284b541679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b64e652f-40b6-4d2a-a2c3-4facc8a537c5,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=b64e652f-40b6-4d2a-a2c3-4facc8a537c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6vtgk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=b64e652f-40b6-4d2a-a2c3-4facc8a537c5;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=b64e652f-40b6-4d2a-a2c3-4facc8a537c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=284b541679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identity=13489 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b64e652f-40b6-4d2a-a2c3-4facc8a537c5,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=b64e652f-40b6-4d2a-a2c3-4facc8a537c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6vtgk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=284b541679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identity=13489 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6vtgk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=284b541679 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=835 identity=13489 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6vtgk subsys=endpoint level=info msg="Successful endpoint creation" containerID=284b541679 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=835 identity=13489 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6vtgk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41fdbcd285 endpointID=1860 k8sNamespace=openstack k8sPodName=glance-storage-init-rh7pk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a577d10e-1cf6-4d24-a0bf-628b057ccb83 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=a577d10e-1cf6-4d24-a0bf-628b057ccb83 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=41fdbcd285 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1860 identity=50786 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-rh7pk subsys=endpoint level=info msg="Delete endpoint request" containerID=284b541679 endpointID=835 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-6vtgk subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=b64e652f-40b6-4d2a-a2c3-4facc8a537c5 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=b64e652f-40b6-4d2a-a2c3-4facc8a537c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=284b541679 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=835 identity=13489 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-6vtgk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 249f4f68-5619-4050-a3ac-36ca2f2e0155 default }" containerID=e587114b5d12d5350ec66396fb382e03a10c19d975b8c2c383d31f3c70417542 datapathConfiguration="&{false false false false false }" interface=lxc50fc111f40ac k8sPodName=openstack/cinder-storage-init-rdgxg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e587114b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1673 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-storage-init-rdgxg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e587114b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1673 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=79fc8803-26f2-45cf-9783-f04f881be781,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=79fc8803-26f2-45cf-9783-f04f881be781,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-storage-init-rdgxg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=79fc8803-26f2-45cf-9783-f04f881be781;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=79fc8803-26f2-45cf-9783-f04f881be781;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e587114b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1673 identity=42999 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=79fc8803-26f2-45cf-9783-f04f881be781,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=79fc8803-26f2-45cf-9783-f04f881be781,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-storage-init-rdgxg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e587114b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1673 identity=42999 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-storage-init-rdgxg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e587114b5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1673 identity=42999 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-storage-init-rdgxg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e587114b5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1673 identity=42999 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-storage-init-rdgxg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 9ea87f4d-fa0b-449a-8488-35babff94b7c default }" containerID=ed807b442cd17c101c81de530f8de640bb3ced0fc42eb9c356ef5fb47a8980bf datapathConfiguration="&{false false false false false }" interface=lxc67ebfda3957b k8sPodName=local-path-storage/helper-pod-create-pvc-cfbd40ce-397e-4143-b21c-b83e485cca0d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed807b442c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cfbd40ce-397e-4143-b21c-b83e485cca0d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed807b442c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cfbd40ce-397e-4143-b21c-b83e485cca0d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed807b442c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=65072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cfbd40ce-397e-4143-b21c-b83e485cca0d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed807b442c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=65072 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cfbd40ce-397e-4143-b21c-b83e485cca0d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed807b442c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1912 identity=65072 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cfbd40ce-397e-4143-b21c-b83e485cca0d subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed807b442c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1912 identity=65072 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cfbd40ce-397e-4143-b21c-b83e485cca0d subsys=daemon level=info msg="Delete endpoint request" containerID=ed807b442c endpointID=1912 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cfbd40ce-397e-4143-b21c-b83e485cca0d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ed807b442c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1912 identity=65072 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cfbd40ce-397e-4143-b21c-b83e485cca0d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 e303e23c-b2be-4570-95af-e027d660e5e0 default }" containerID=b8340ae72bad576a711513042e2cec03f26edb3f33e67135fee36b075f840c22 datapathConfiguration="&{false false false false false }" interface=lxc2ce732c8ed2a k8sPodName=openstack/rabbitmq-magnum-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8340ae72b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8340ae72b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-magnum,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b8340ae72b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-magnum;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8340ae72b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=48088 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-magnum,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8340ae72b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=48088 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8340ae72b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=500 identity=48088 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8340ae72b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=500 identity=48088 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e587114b5d endpointID=1673 k8sNamespace=openstack k8sPodName=cinder-storage-init-rdgxg subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=79fc8803-26f2-45cf-9783-f04f881be781 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=79fc8803-26f2-45cf-9783-f04f881be781 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e587114b5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1673 identity=42999 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-storage-init-rdgxg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 1bd9f289-f03f-406b-a79a-bd8f5fbfe271 default }" containerID=902bac1371a5b154c50a5c4190a834001cec7a4bc1c037117891d96916eb15f9 datapathConfiguration="&{false false false false false }" interface=lxc9caa4c787bd7 k8sPodName=openstack/cinder-bootstrap-8sp5s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=902bac1371 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/cinder-bootstrap-8sp5s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=902bac1371 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a1c7c8f3-bc45-4ac6-a3a8-7a31485ace98,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=a1c7c8f3-bc45-4ac6-a3a8-7a31485ace98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/cinder-bootstrap-8sp5s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a1c7c8f3-bc45-4ac6-a3a8-7a31485ace98;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=a1c7c8f3-bc45-4ac6-a3a8-7a31485ace98;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=902bac1371 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identity=31797 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a1c7c8f3-bc45-4ac6-a3a8-7a31485ace98,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=a1c7c8f3-bc45-4ac6-a3a8-7a31485ace98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/cinder-bootstrap-8sp5s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=902bac1371 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identity=31797 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/cinder-bootstrap-8sp5s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=902bac1371 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3902 identity=31797 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/cinder-bootstrap-8sp5s subsys=endpoint level=info msg="Successful endpoint creation" containerID=902bac1371 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3902 identity=31797 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/cinder-bootstrap-8sp5s subsys=daemon level=info msg="Delete endpoint request" containerID=4eb0a316dd endpointID=83 k8sNamespace=openstack k8sPodName=heat-domain-ks-user-8dxvw subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=affda268-1c45-4207-9f14-6949235fe651 k8s:batch.kubernetes.io/job-name=heat-domain-ks-user k8s:component=ks-user k8s:controller-uid=affda268-1c45-4207-9f14-6949235fe651 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-domain-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=4eb0a316dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=83 identity=24477 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/heat-domain-ks-user-8dxvw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.232 81600c5f-2af2-42dc-a0d6-0d0247c78782 default }" containerID=94e8e97cde64af6d783b4d8f2efd3029d6c4a14b516dbbb4f3ea9fcc63445714 datapathConfiguration="&{false false false false false }" interface=lxca710601433f7 k8sPodName=openstack/heat-trusts-5thvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94e8e97cde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3206 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/heat-trusts-5thvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94e8e97cde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3206 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=211887d3-0907-42d4-b35e-57e936d5aa44,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=211887d3-0907-42d4-b35e-57e936d5aa44,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/heat-trusts-5thvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=94e8e97cde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3206 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=openstack/heat-trusts-5thvs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=211887d3-0907-42d4-b35e-57e936d5aa44;k8s:batch.kubernetes.io/job-name=heat-trusts;k8s:component=trusts;k8s:controller-uid=211887d3-0907-42d4-b35e-57e936d5aa44;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-trusts;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94e8e97cde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3206 identity=6709 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=211887d3-0907-42d4-b35e-57e936d5aa44,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=211887d3-0907-42d4-b35e-57e936d5aa44,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/heat-trusts-5thvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94e8e97cde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3206 identity=6709 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/heat-trusts-5thvs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94e8e97cde datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3206 identity=6709 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/heat-trusts-5thvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=94e8e97cde datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3206 identity=6709 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/heat-trusts-5thvs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=13a97ea27d endpointID=526 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29619415-94l4t subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=80334530-f296-448f-91bf-213777ecba8a k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29619415 k8s:component=engine-cleaner k8s:controller-uid=80334530-f296-448f-91bf-213777ecba8a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29619415 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=13a97ea27d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=526 identity=19052 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/heat-engine-cleaner-29619415-94l4t subsys=endpoint level=info msg="Delete endpoint request" containerID=94e8e97cde endpointID=3206 k8sNamespace=openstack k8sPodName=heat-trusts-5thvs subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=211887d3-0907-42d4-b35e-57e936d5aa44 k8s:batch.kubernetes.io/job-name=heat-trusts k8s:component=trusts k8s:controller-uid=211887d3-0907-42d4-b35e-57e936d5aa44 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-trusts k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=94e8e97cde datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3206 identity=6709 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/heat-trusts-5thvs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 a982cdd5-40d8-4d50-9abe-45e8d9513ad3 default }" containerID=0fcb66ff11b338b368f5d718930b7de2d7fa6902903f3f20d8f5ba074fda3536 datapathConfiguration="&{false false false false false }" interface=lxc6a45b5c82a6d k8sPodName=openstack/cinder-backup-784f585fc4-xhdrc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fcb66ff11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-backup-784f585fc4-xhdrc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fcb66ff11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-backup-784f585fc4-xhdrc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0fcb66ff11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-backup-784f585fc4-xhdrc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fcb66ff11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=27020 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-backup-784f585fc4-xhdrc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fcb66ff11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=27020 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-backup-784f585fc4-xhdrc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 26668c84-c88a-4b76-a32e-28344877b727 default }" containerID=6f0e4f1d8dc83e8923b7a0b558e7e2da764047b5de653e94ad60d3dd059122db datapathConfiguration="&{false false false false false }" interface=lxc87d29abf203f k8sPodName=openstack/cinder-volume-69fdccdb78-ls4wg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f0e4f1d8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/cinder-volume-69fdccdb78-ls4wg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f0e4f1d8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/cinder-volume-69fdccdb78-ls4wg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f0e4f1d8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identity=43921 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/cinder-volume-69fdccdb78-ls4wg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f0e4f1d8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identity=43921 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/cinder-volume-69fdccdb78-ls4wg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0fcb66ff11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=144 identity=27020 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-backup-784f585fc4-xhdrc subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fcb66ff11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=144 identity=27020 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-backup-784f585fc4-xhdrc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6f0e4f1d8d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=250 identity=43921 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/cinder-volume-69fdccdb78-ls4wg subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f0e4f1d8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=250 identity=43921 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/cinder-volume-69fdccdb78-ls4wg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 cf0041ec-d3b5-46be-9d6f-35483899af0d default }" containerID=4b95efc268289576ff67aaa68ae7c7cbd5f5ffbe877a3ab7452037dc457c7c3c datapathConfiguration="&{false false false false false }" interface=lxcd4a415b77bea k8sPodName=openstack/glance-api-86cd78c59c-ldm5v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b95efc268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-api-86cd78c59c-ldm5v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b95efc268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-api-86cd78c59c-ldm5v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b95efc268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identity=59550 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-api-86cd78c59c-ldm5v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b95efc268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identity=59550 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-api-86cd78c59c-ldm5v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b95efc268 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=71 identity=59550 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-api-86cd78c59c-ldm5v subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b95efc268 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=71 identity=59550 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-api-86cd78c59c-ldm5v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=902bac1371 endpointID=3902 k8sNamespace=openstack k8sPodName=cinder-bootstrap-8sp5s subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a1c7c8f3-bc45-4ac6-a3a8-7a31485ace98 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=a1c7c8f3-bc45-4ac6-a3a8-7a31485ace98 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=902bac1371 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3902 identity=31797 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/cinder-bootstrap-8sp5s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 32c0878f-a279-4493-8f27-9e5e640d289b default }" containerID=8d22deffb41f81330b290137d285e55d9cf5eff1687b6317e047ed9f07c2bd1e datapathConfiguration="&{false false false false false }" interface=lxccc35f43062de k8sPodName=openstack/heat-engine-cleaner-29619420-7fbc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d22deffb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/heat-engine-cleaner-29619420-7fbc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d22deffb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=e446e3cc-51b5-4724-908a-3932fc9cb913,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29619420,k8s:component=engine-cleaner,k8s:controller-uid=e446e3cc-51b5-4724-908a-3932fc9cb913,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29619420,k8s:release_group=heat" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/heat-engine-cleaner-29619420-7fbc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=e446e3cc-51b5-4724-908a-3932fc9cb913;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29619420;k8s:component=engine-cleaner;k8s:controller-uid=e446e3cc-51b5-4724-908a-3932fc9cb913;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29619420;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d22deffb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identity=38004 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=e446e3cc-51b5-4724-908a-3932fc9cb913,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29619420,k8s:component=engine-cleaner,k8s:controller-uid=e446e3cc-51b5-4724-908a-3932fc9cb913,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29619420,k8s:release_group=heat" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/heat-engine-cleaner-29619420-7fbc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d22deffb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identity=38004 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/heat-engine-cleaner-29619420-7fbc2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8d22deffb4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1031 identity=38004 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/heat-engine-cleaner-29619420-7fbc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d22deffb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1031 identity=38004 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/heat-engine-cleaner-29619420-7fbc2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d22deffb4 endpointID=1031 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29619420-7fbc2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=e446e3cc-51b5-4724-908a-3932fc9cb913 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29619420 k8s:component=engine-cleaner k8s:controller-uid=e446e3cc-51b5-4724-908a-3932fc9cb913 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29619420 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=8d22deffb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1031 identity=38004 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/heat-engine-cleaner-29619420-7fbc2 subsys=endpoint