level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="734.498µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="40.131µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="751.277µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="7.86µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=94.714961ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.961µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.28µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="50.762µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="49.301µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="60.551µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="416.48µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.45µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=18.714349ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.808072ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="54.671µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="39.321µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="214.615µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="90.692µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="66.961µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.127143ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="85.232µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.511µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.19.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.026942ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.75µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.289741ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="12.63µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.727358ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.63µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="19.21µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.58µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="36.381µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="301.207µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.11µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.631µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="221.015µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.129446ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.236788ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.75µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="19.331µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.19 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.19 ipAddr.ipv6="" k8sNodeIP=199.204.45.19 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg=" External-Node IPv4: 199.204.45.19" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.50" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.19" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.19} {CiliumInternalIP 10.0.0.50}] 10.0.0.0/24 [] [] 10.0.0.49 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38841" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.803618187s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="31.851µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.19µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="44.891µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="22.16µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.973266383s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=302.621786ms file-path=/var/run/cilium/state/templates/6178c3d004be0bfc23d0872bee59a56071dcf96eedc36f89b2f5b4ef0be4db18/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=582 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 ipv4=10.0.0.49 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 identityLabels="reserved:health" ipv4=10.0.0.49 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 identity=4 identityLabels="reserved:health" ipv4=10.0.0.49 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.086082422s file-path=/var/run/cilium/state/templates/f3335c28ecfc17ecff9e2ad2a05caa13dd46ecbaae0f7649e1a9608ab177483a/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2651 identity=4 ipv4=10.0.0.49 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 f6ac8b37-36c6-4819-9ffc-7f931fb381fa default }" containerID=42ced25e4240f6add7929ad3538e92fff3a30516c5e14d18ac5bc9e959333024 datapathConfiguration="&{false false false false false }" interface=lxc1d8e69bfc1de k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zcn7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42ced25e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 ipv4=10.0.0.217 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zcn7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42ced25e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=1b66f006-f426-4665-a296-c99efb51e730,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=1b66f006-f426-4665-a296-c99efb51e730,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.217 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zcn7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=1b66f006-f426-4665-a296-c99efb51e730;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=1b66f006-f426-4665-a296-c99efb51e730;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=42ced25e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zcn7f line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=42ced25e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identity=4112 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=1b66f006-f426-4665-a296-c99efb51e730,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=1b66f006-f426-4665-a296-c99efb51e730,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.217 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zcn7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42ced25e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identity=4112 ipv4=10.0.0.217 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zcn7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 c9337c31-3ecb-4f0c-ac6d-4c833601cfce default }" containerID=807ba2354606b029592631d984cbab0e34ad36806d03f8b6299d794dc99feee2 datapathConfiguration="&{false false false false false }" interface=lxc34c2a66fed9d k8sPodName=kube-system/coredns-7c96b6546b-67bbp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=807ba23546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-67bbp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=807ba23546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-67bbp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=807ba23546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identity=15159 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-67bbp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=807ba23546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identity=15159 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-67bbp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42ced25e42 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3752 identity=4112 ipv4=10.0.0.217 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zcn7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=42ced25e42 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3752 identity=4112 ipv4=10.0.0.217 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zcn7f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=807ba23546 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=574 identity=15159 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-67bbp subsys=endpoint level=info msg="Successful endpoint creation" containerID=807ba23546 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=574 identity=15159 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-67bbp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=42ced25e42 endpointID=3752 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-zcn7f subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=1b66f006-f426-4665-a296-c99efb51e730 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=1b66f006-f426-4665-a296-c99efb51e730 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=42ced25e42 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3752 identity=4112 ipv4=10.0.0.217 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zcn7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 bfb1e02a-6d12-44e6-9c9a-7b34147da969 default }" containerID=dbb1b9e59b95dcee59bce9a493f5dcb73fd447f5dd335c6e4fbfde2d640f73fa datapathConfiguration="&{false false false false false }" interface=lxc50f319d1215f k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-84pb7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbb1b9e59b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 ipv4=10.0.0.24 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-84pb7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbb1b9e59b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.24 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-84pb7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbb1b9e59b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identity=13458 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.24 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-84pb7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbb1b9e59b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identity=13458 ipv4=10.0.0.24 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-84pb7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dbb1b9e59b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=805 identity=13458 ipv4=10.0.0.24 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-84pb7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbb1b9e59b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=805 identity=13458 ipv4=10.0.0.24 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-84pb7 subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=582 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00582 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00582 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00582 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00582:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=582 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 bb1c42ab-e51c-4de4-a222-b7d1c6a8e696 default }" containerID=4a13754e380087d4553449f1f3fb6e3b8ff1c55293f0df8352a11fde3d875b8a datapathConfiguration="&{false false false false false }" interface=lxca334e93d1a03 k8sPodName=kube-system/coredns-67659f764b-vwmlq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a13754e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 ipv4=10.0.0.36 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwmlq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a13754e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.36 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwmlq subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4a13754e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identity=15159 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.36 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwmlq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a13754e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identity=15159 ipv4=10.0.0.36 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwmlq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a13754e38 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=556 identity=15159 ipv4=10.0.0.36 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwmlq subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a13754e38 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=556 identity=15159 ipv4=10.0.0.36 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwmlq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 d49f3fb9-35cd-4c05-8fd8-c441bc04c70b default }" containerID=5474e8ee80e30328ae5fa469aa0e2e32859cc3f605f007b4703f0bd75ba2f3aa datapathConfiguration="&{false false false false false }" interface=lxce87a6a7e39e2 k8sPodName=kube-system/coredns-67659f764b-rpwkx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5474e8ee80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-rpwkx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5474e8ee80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-rpwkx subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5474e8ee80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=15159 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-rpwkx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5474e8ee80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=15159 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-rpwkx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5474e8ee80 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1809 identity=15159 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-rpwkx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5474e8ee80 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1809 identity=15159 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-rpwkx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.120 dda49850-3e11-48a7-8469-dbc5f1346ef8 default }" containerID=e059073d600af1c490aa84b229f39f487919dba99f08978b86464a03948ef700 datapathConfiguration="&{false false false false false }" interface=lxc6efffa4727af k8sPodName=local-path-storage/local-path-provisioner-679c578f5-spqfl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e059073d60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-spqfl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e059073d60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-spqfl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e059073d60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-spqfl line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e059073d60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=55032 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-spqfl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e059073d60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=55032 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-spqfl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e059073d60 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=151 identity=55032 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-spqfl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e059073d60 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=151 identity=55032 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-spqfl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=807ba23546 endpointID=574 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-67bbp subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=807ba23546 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=574 identity=15159 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-67bbp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 3550fe5c-6927-46cf-a10f-e85f1f21e651 default }" containerID=880c0c0386a84baad97b12df0a4c3414d140dbdaedfea6a71875bf6f6f3e28fb datapathConfiguration="&{false false false false false }" interface=lxcd6a3940320b2 k8sPodName=cert-manager/cert-manager-75c4c745bc-hvg5s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=880c0c0386 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hvg5s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=880c0c0386 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hvg5s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=880c0c0386 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hvg5s line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=880c0c0386 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identity=1279 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hvg5s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=880c0c0386 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identity=1279 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hvg5s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 1a8de8c9-10ff-4e55-8e57-4a5efadb58ae default }" containerID=61f3a86da5a4c48f972da7cffeaf369b7ceca0b0c31e3a8a99da3eb50d569f3e datapathConfiguration="&{false false false false false }" interface=lxc5cf94847b98d k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rds56 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61f3a86da5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rds56 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61f3a86da5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rds56 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.213 c685ecdd-a245-476c-a5d7-2e91bd6b7214 default }" containerID=f4a74efe18a0fcd4dbea2a7835cc760e256cefb22884c71d1f3065bc5f15b3d8 datapathConfiguration="&{false false false false false }" interface=lxcaaf1a77bbd00 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kfjx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4a74efe18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kfjx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4a74efe18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kfjx2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61f3a86da5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=2546 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rds56 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=61f3a86da5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=2546 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rds56 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4a74efe18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identity=12902 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kfjx2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4a74efe18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identity=12902 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kfjx2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=880c0c0386 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1183 identity=1279 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hvg5s subsys=endpoint level=info msg="Successful endpoint creation" containerID=880c0c0386 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1183 identity=1279 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hvg5s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f4a74efe18 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3964 identity=12902 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kfjx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4a74efe18 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3964 identity=12902 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kfjx2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=61f3a86da5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=18 identity=2546 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rds56 subsys=endpoint level=info msg="Successful endpoint creation" containerID=61f3a86da5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=18 identity=2546 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rds56 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.161 0973a66e-2372-4053-bd9d-a6ec967605ad default }" containerID=c8f015eefe23e706608b426a6c92af0daa8d502e467f3ab9124c936840b640e0 datapathConfiguration="&{false false false false false }" interface=lxc3e8b3bc20152 k8sPodName=cert-manager/cert-manager-startupapicheck-rvbqz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8f015eefe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3622 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rvbqz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8f015eefe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3622 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c2cd0ab3-456d-4c41-b3c0-e17f0209c6ec,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c2cd0ab3-456d-4c41-b3c0-e17f0209c6ec,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rvbqz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c8f015eefe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3622 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rvbqz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=c2cd0ab3-456d-4c41-b3c0-e17f0209c6ec;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=c2cd0ab3-456d-4c41-b3c0-e17f0209c6ec;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8f015eefe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3622 identity=19417 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c2cd0ab3-456d-4c41-b3c0-e17f0209c6ec,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c2cd0ab3-456d-4c41-b3c0-e17f0209c6ec,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rvbqz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8f015eefe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3622 identity=19417 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rvbqz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8f015eefe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3622 identity=19417 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rvbqz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8f015eefe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3622 identity=19417 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rvbqz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c8f015eefe endpointID=3622 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-rvbqz subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=c2cd0ab3-456d-4c41-b3c0-e17f0209c6ec k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=c2cd0ab3-456d-4c41-b3c0-e17f0209c6ec k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=c8f015eefe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3622 identity=19417 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rvbqz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 7b520d1b-b48a-4ee4-8fe2-bf39acb903c5 default }" containerID=cc70f32593bb5c6b95ab2f7e2a8e65586579b33d3ff21c27493bcb3931900998 datapathConfiguration="&{false false false false false }" interface=lxcd0ad6020ddac k8sPodName=ingress-nginx/ingress-nginx-admission-create-x9zcm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc70f32593 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2178 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x9zcm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc70f32593 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2178 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b7742fcb-045c-4425-92f9-758ea3c0b4f2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b7742fcb-045c-4425-92f9-758ea3c0b4f2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x9zcm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cc70f32593 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2178 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x9zcm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=b7742fcb-045c-4425-92f9-758ea3c0b4f2;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=b7742fcb-045c-4425-92f9-758ea3c0b4f2;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc70f32593 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2178 identity=432 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b7742fcb-045c-4425-92f9-758ea3c0b4f2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b7742fcb-045c-4425-92f9-758ea3c0b4f2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x9zcm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc70f32593 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2178 identity=432 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x9zcm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc70f32593 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2178 identity=432 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x9zcm subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc70f32593 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2178 identity=432 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x9zcm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cc70f32593 endpointID=2178 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-x9zcm subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=b7742fcb-045c-4425-92f9-758ea3c0b4f2 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=b7742fcb-045c-4425-92f9-758ea3c0b4f2 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=cc70f32593 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2178 identity=432 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x9zcm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 02430860-d253-4ef7-a3f4-4aadce98873a default }" containerID=0971e569052ca61bd81b5c8670865bc325eca69e8a09f54b957a85ba06146080 datapathConfiguration="&{false false false false false }" interface=lxcb214311c1c69 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8t2vj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0971e56905 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 ipv4=10.0.0.15 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8t2vj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0971e56905 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.15 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8t2vj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0971e56905 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.15 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8t2vj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0971e56905 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=9302 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.15 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8t2vj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0971e56905 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=9302 ipv4=10.0.0.15 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8t2vj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0971e56905 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2215 identity=9302 ipv4=10.0.0.15 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8t2vj subsys=endpoint level=info msg="Successful endpoint creation" containerID=0971e56905 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2215 identity=9302 ipv4=10.0.0.15 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8t2vj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.162 f30930e4-bbb5-41ea-b827-78dad12e777f default }" containerID=7180931c9992ffeeaadf1d0463c4e2113f98fc84d37cc9e5ec14ba10e1a58dd7 datapathConfiguration="&{false false false false false }" interface=lxcce721a8704bf k8sPodName=ingress-nginx/ingress-nginx-admission-patch-72lz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7180931c99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-72lz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7180931c99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=40841ea9-35a7-4c95-92ab-b83bbb63b653,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=40841ea9-35a7-4c95-92ab-b83bbb63b653,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-72lz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=40841ea9-35a7-4c95-92ab-b83bbb63b653;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=40841ea9-35a7-4c95-92ab-b83bbb63b653;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7180931c99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identity=4918 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=40841ea9-35a7-4c95-92ab-b83bbb63b653,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=40841ea9-35a7-4c95-92ab-b83bbb63b653,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-72lz9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7180931c99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identity=4918 ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-72lz9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7180931c99 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2826 identity=4918 ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-72lz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7180931c99 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2826 identity=4918 ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-72lz9 subsys=daemon level=info msg="Delete endpoint request" containerID=7180931c99 endpointID=2826 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-72lz9 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=40841ea9-35a7-4c95-92ab-b83bbb63b653 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=40841ea9-35a7-4c95-92ab-b83bbb63b653 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=7180931c99 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2826 identity=4918 ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-72lz9 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=b31b8520-b9eb-4eda-ab50-b6116a2ecbe9] Description:}]" policyAddRequest=8607b368-0376-4027-b979-db513d4e9857 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=8607b368-0376-4027-b979-db513d4e9857 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=02d25078-809a-495f-9b73-49bd4bfa7761] Description:}]" policyAddRequest=695f62d9-ec64-45d1-a678-388bd2ce9a4b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=695f62d9-ec64-45d1-a678-388bd2ce9a4b policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.32 8cdb4d76-dfe5-4dc7-acc2-861bfa2a38c9 default }" containerID=10e2a362456a3e1547e67b15189afb889a1c1c658de2d9dc0708cf4350c9a4ff datapathConfiguration="&{false false false false false }" interface=lxc42e5a33274fd k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zrps5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10e2a36245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zrps5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10e2a36245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zrps5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=10e2a36245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 identity=8807 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zrps5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10e2a36245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 identity=8807 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zrps5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10e2a36245 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2734 identity=8807 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zrps5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=10e2a36245 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2734 identity=8807 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zrps5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.185 a0399b03-da3d-4c2d-8abb-8a50bbefb3ad default }" containerID=52c8fa93d195529181945c48c20064934ebca8f2fc5077a33d887b9b73d00ca9 datapathConfiguration="&{false false false false false }" interface=lxcf44671967263 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j9d88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52c8fa93d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j9d88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52c8fa93d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j9d88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52c8fa93d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 identity=6539 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j9d88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52c8fa93d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 identity=6539 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j9d88 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=52c8fa93d1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=717 identity=6539 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j9d88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52c8fa93d1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=717 identity=6539 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j9d88 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.200 2494b72c-cd60-41c8-b6ee-66281f2b6de6 default }" containerID=87a9b3162c87455be5e764271b1cdbaaac7e6cbd31ac5beff513915b6b4f5e85 datapathConfiguration="&{false false false false false }" interface=lxcd1e988595842 k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5hpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87a9b3162c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5hpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87a9b3162c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5hpb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=87a9b3162c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5hpb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87a9b3162c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identity=20542 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5hpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87a9b3162c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identity=20542 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5hpb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87a9b3162c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=326 identity=20542 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5hpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=87a9b3162c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=326 identity=20542 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5hpb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.169 bc23dc61-c8f2-43d0-9dd7-82b740def714 default }" containerID=08f2bce6f4e908efe8f0d947cda9c87dc45149f6d68f591fed5babc9b8eb0866 datapathConfiguration="&{false false false false false }" interface=lxc9df5eb8b68ec k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08f2bce6f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08f2bce6f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08f2bce6f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identity=5442 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08f2bce6f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identity=5442 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=08f2bce6f4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1515 identity=5442 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=08f2bce6f4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1515 identity=5442 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.154 527be5b6-fce4-4e9b-8b0f-e3a9b0c34a5e default }" containerID=c2759db9a84d51f06c236362bd61b7f50790d4b04ea641e1c648ee2388699f5b datapathConfiguration="&{false false false false false }" interface=lxcae0a10572b21 k8sPodName=local-path-storage/helper-pod-create-pvc-69bcafde-9e9d-4b15-8500-6c4cd7ee0311 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2759db9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-69bcafde-9e9d-4b15-8500-6c4cd7ee0311 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2759db9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-69bcafde-9e9d-4b15-8500-6c4cd7ee0311 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2759db9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=46931 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-69bcafde-9e9d-4b15-8500-6c4cd7ee0311 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2759db9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=46931 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-69bcafde-9e9d-4b15-8500-6c4cd7ee0311 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2759db9a8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2616 identity=46931 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-69bcafde-9e9d-4b15-8500-6c4cd7ee0311 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2759db9a8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2616 identity=46931 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-69bcafde-9e9d-4b15-8500-6c4cd7ee0311 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2759db9a8 endpointID=2616 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-69bcafde-9e9d-4b15-8500-6c4cd7ee0311 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c2759db9a8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2616 identity=46931 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-69bcafde-9e9d-4b15-8500-6c4cd7ee0311 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 37639f85-d7c4-4ec3-af8e-b4217f792563 default }" containerID=75d5463310d08be38634fde09d1bea6f805ffb047bc61379f1aa797191792c8c datapathConfiguration="&{false false false false false }" interface=lxc33d6c1bd9d67 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75d5463310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=811 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75d5463310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=811 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75d5463310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=811 identity=39490 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75d5463310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=811 identity=39490 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=75d5463310 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=811 identity=39490 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=75d5463310 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=811 identity=39490 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=warning msg="Network status error received, restarting client connections" error="an error on the server (\"[+]ping ok\\n[+]log ok\\n[-]etcd failed: reason withheld\\n[+]poststarthook/start-kube-apiserver-admission-initializer ok\\n[+]poststarthook/generic-apiserver-start-informers ok\\n[+]poststarthook/priority-and-fairness-config-consumer ok\\n[+]poststarthook/priority-and-fairness-filter ok\\n[+]poststarthook/storage-object-count-tracker-hook ok\\n[+]poststarthook/start-apiextensions-informers ok\\n[+]poststarthook/start-apiextensions-controllers ok\\n[+]poststarthook/crd-informer-synced ok\\n[+]poststarthook/start-service-ip-repair-controllers ok\\n[+]poststarthook/rbac/bootstrap-roles ok\\n[+]poststarthook/scheduling/bootstrap-system-priority-classes ok\\n[+]poststarthook/priority-and-fairness-config-producer ok\\n[+]poststarthook/start-system-namespaces-controller ok\\n[+]poststarthook/bootstrap-controller ok\\n[+]poststarthook/start-cluster-authentication-info-controller ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-controller ok\\n[+]poststarthook/start-deprecated-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-legacy-token-tracking-controller ok\\n[+]poststarthook/aggregator-reload-proxy-client-cert ok\\n[+]poststarthook/start-kube-aggregator-informers ok\\n[+]poststarthook/apiservice-registration-controller ok\\n[+]poststarthook/apiservice-status-available-controller ok\\n[+]poststarthook/kube-apiserver-autoregistration ok\\n[+]autoregister-completion ok\\n[+]poststarthook/apiservice-openapi-controller ok\\n[+]poststarthook/apiservice-openapiv3-controller ok\\n[+]poststarthook/apiservice-discovery-controller ok\\nhealthz check failed\") has prevented the request from succeeding (get healthz.meta.k8s.io)" subsys=k8s-client level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2706705f-c539-4d6b-a6eb-c55b566cdcaa] Description:}]" policyAddRequest=3adc870f-9afd-4600-910b-9a85311b7b84 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=3adc870f-9afd-4600-910b-9a85311b7b84 policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.243 4410664f-d292-4b4b-97b8-96d56a0d149c default }" containerID=6404d571d0c26603d357ae0e66c2d34cfcd2b8260e304de80d8624454bcbf999 datapathConfiguration="&{false false false false false }" interface=lxcffe42ff60788 k8sPodName=local-path-storage/helper-pod-create-pvc-4ee4402b-8104-4999-af48-f92b7808975e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6404d571d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ee4402b-8104-4999-af48-f92b7808975e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6404d571d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ee4402b-8104-4999-af48-f92b7808975e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6404d571d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identity=46931 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ee4402b-8104-4999-af48-f92b7808975e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6404d571d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identity=46931 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ee4402b-8104-4999-af48-f92b7808975e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6404d571d0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4025 identity=46931 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ee4402b-8104-4999-af48-f92b7808975e subsys=endpoint level=info msg="Successful endpoint creation" containerID=6404d571d0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4025 identity=46931 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ee4402b-8104-4999-af48-f92b7808975e subsys=daemon level=info msg="Delete endpoint request" containerID=6404d571d0 endpointID=4025 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4ee4402b-8104-4999-af48-f92b7808975e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6404d571d0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4025 identity=46931 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ee4402b-8104-4999-af48-f92b7808975e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 ff2fbe7d-0c50-4357-9313-6608166db943 default }" containerID=c3d7414a579a64171f2441b118f571029be3788b7c3f6971d4a3e41f86071bea datapathConfiguration="&{false false false false false }" interface=lxc3d706ce756f5 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3d7414a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3d7414a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3d7414a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identity=64004 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c3d7414a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identity=64004 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3d7414a57 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=258 identity=64004 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3d7414a57 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=258 identity=64004 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=d4d55f0b-24a7-4650-96dc-7b8b0649bb28] Description:}]" policyAddRequest=e3e586d6-2b13-46db-a3cf-b839dac2bad1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e3e586d6-2b13-46db-a3cf-b839dac2bad1 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.170 ebd728ce-92e9-43f9-8fcf-fb033b681b51 default }" containerID=d2bcc3a486ea2f08d7816a89489eeb9568e2cf2395f0c18c8d7354f478ce8292 datapathConfiguration="&{false false false false false }" interface=lxc5ebc094898c1 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2bcc3a486 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 ipv4=10.0.0.170 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2bcc3a486 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.170 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d2bcc3a486 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d2bcc3a486 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=39483 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.170 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2bcc3a486 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=39483 ipv4=10.0.0.170 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2bcc3a486 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=431 identity=39483 ipv4=10.0.0.170 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2bcc3a486 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=431 identity=39483 ipv4=10.0.0.170 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.003212628674232689 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.25 d386d912-d7b8-4c1c-86a0-1b7bc89cd6bc default }" containerID=386b0f0497affd4a028bd586c3f4011372d24a9171e8661e93f8b9d2e0494565 datapathConfiguration="&{false false false false false }" interface=lxc0e1952bc17bc k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6rdqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=386b0f0497 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6rdqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=386b0f0497 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6rdqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=386b0f0497 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identity=15336 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6rdqk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=386b0f0497 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identity=15336 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6rdqk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 22a9e0f3-df12-47fd-a9e4-c7c2a5986e51 default }" containerID=5e63d37b087c8274856543101e7331362cc257d226bc8258bb200a5d3ef41f0f datapathConfiguration="&{false false false false false }" interface=lxc40119352bc46 k8sPodName=monitoring/node-feature-discovery-worker-fgjbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e63d37b08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fgjbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e63d37b08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fgjbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e63d37b08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 identity=13746 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fgjbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e63d37b08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 identity=13746 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fgjbm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 5a26cad6-fd89-4bac-b1c0-9e34dbb1063e default }" containerID=ccaa47feef649d8669a9cf15101057865269868ac377838e8d8c227c2f3040bf datapathConfiguration="&{false false false false false }" interface=lxcfa26120cc71d k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xcllq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccaa47feef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1969 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xcllq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccaa47feef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1969 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xcllq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccaa47feef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1969 identity=51618 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xcllq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccaa47feef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1969 identity=51618 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xcllq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=386b0f0497 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3268 identity=15336 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6rdqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=386b0f0497 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3268 identity=15336 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6rdqk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5e63d37b08 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=992 identity=13746 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fgjbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e63d37b08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=992 identity=13746 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fgjbm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ccaa47feef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1969 identity=51618 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xcllq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccaa47feef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1969 identity=51618 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xcllq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.26 05913e63-deca-46a1-95ad-e0b195607447 default }" containerID=3cee00e688d8f53b4cf689323bf72f5317fef9d3b822f10cea0140a005f39611 datapathConfiguration="&{false false false false false }" interface=lxc4e9b98add89f k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s6rbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cee00e688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s6rbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cee00e688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s6rbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3cee00e688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=2227 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s6rbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cee00e688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=2227 ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s6rbm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3cee00e688 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=410 identity=2227 ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s6rbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cee00e688 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=410 identity=2227 ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s6rbm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=582 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-179-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00582 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00582 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00582 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00582:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=582 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 1f830ef6-735d-49bb-865b-7588d48a10c5 default }" containerID=c71544430f8bc2c1ba063fec4fbaa9cd081c41180b431c0ae1034b4600b32dbf datapathConfiguration="&{false false false false false }" interface=lxc6d8331d6bc82 k8sPodName=monitoring/kube-prometheus-stack-admission-create-d29x4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c71544430f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d29x4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c71544430f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=dfcf9358-50a5-426b-9eb8-39c671a5c87c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=dfcf9358-50a5-426b-9eb8-39c671a5c87c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d29x4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=dfcf9358-50a5-426b-9eb8-39c671a5c87c;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=dfcf9358-50a5-426b-9eb8-39c671a5c87c;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c71544430f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identity=10966 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=dfcf9358-50a5-426b-9eb8-39c671a5c87c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=dfcf9358-50a5-426b-9eb8-39c671a5c87c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d29x4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c71544430f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identity=10966 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d29x4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c71544430f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3377 identity=10966 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d29x4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c71544430f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3377 identity=10966 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d29x4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c71544430f endpointID=3377 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-d29x4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=dfcf9358-50a5-426b-9eb8-39c671a5c87c k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=dfcf9358-50a5-426b-9eb8-39c671a5c87c k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=c71544430f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3377 identity=10966 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d29x4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 a9a0ff10-5e44-46b2-92b0-087bce044ab0 default }" containerID=f59adb7e478ab3f905389a4099bbb4b642e9a4a059b87415883f51dc7d06f23f datapathConfiguration="&{false false false false false }" interface=lxc44c9485b7204 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tmxjh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f59adb7e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tmxjh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f59adb7e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tmxjh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f59adb7e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 identity=1836 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tmxjh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f59adb7e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 identity=1836 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tmxjh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 241f10b7-3561-4bcc-91aa-4c6532084477 default }" containerID=0071d9a4ff6cca957060bda9fc21bfddd47361cb7493677e260c04e4f595d0a4 datapathConfiguration="&{false false false false false }" interface=lxc548233aff383 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h75tf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0071d9a4ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h75tf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0071d9a4ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h75tf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0071d9a4ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identity=50919 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h75tf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0071d9a4ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identity=50919 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h75tf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f59adb7e47 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=649 identity=1836 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tmxjh subsys=endpoint level=info msg="Successful endpoint creation" containerID=f59adb7e47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=649 identity=1836 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tmxjh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.30 33c11596-bf7d-4591-8ec5-40030388b7f9 default }" containerID=973eb262644039a3eff66ac133da7571da8e66f15c3680c205311f700a844b9a datapathConfiguration="&{false false false false false }" interface=lxce2059620804e k8sPodName=monitoring/kube-prometheus-stack-grafana-5b5b9974f5-p2lbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=973eb26264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b5b9974f5-p2lbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=973eb26264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b5b9974f5-p2lbn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=973eb26264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=35661 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b5b9974f5-p2lbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=973eb26264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=35661 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b5b9974f5-p2lbn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0071d9a4ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1873 identity=50919 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h75tf subsys=endpoint level=info msg="Successful endpoint creation" containerID=0071d9a4ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1873 identity=50919 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h75tf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=973eb26264 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=341 identity=35661 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b5b9974f5-p2lbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=973eb26264 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=341 identity=35661 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b5b9974f5-p2lbn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.81 f1ac4157-7cd0-46c8-9a02-0c901b04fcfc default }" containerID=18761c8b42920ae37dc7ab852217e590ae27b34b6787fe86b4ea6bb42c01e099 datapathConfiguration="&{false false false false false }" interface=lxc14cc931dff32 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x82z5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18761c8b42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3747 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x82z5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18761c8b42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3747 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=38ce084d-3dc7-4d09-9f1d-fedd43bde17a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=38ce084d-3dc7-4d09-9f1d-fedd43bde17a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x82z5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=38ce084d-3dc7-4d09-9f1d-fedd43bde17a;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=38ce084d-3dc7-4d09-9f1d-fedd43bde17a;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18761c8b42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3747 identity=21309 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=38ce084d-3dc7-4d09-9f1d-fedd43bde17a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=38ce084d-3dc7-4d09-9f1d-fedd43bde17a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x82z5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18761c8b42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3747 identity=21309 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x82z5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18761c8b42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3747 identity=21309 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x82z5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=18761c8b42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3747 identity=21309 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x82z5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=18761c8b42 endpointID=3747 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-x82z5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=38ce084d-3dc7-4d09-9f1d-fedd43bde17a k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=38ce084d-3dc7-4d09-9f1d-fedd43bde17a k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=18761c8b42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3747 identity=21309 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x82z5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 155cadf4-632d-4ce2-8f5d-9f97aefc299a default }" containerID=a24f93ca18e632719c3b20a9f0f45991d86d7f6e810ebcc950c6fa7eb0e2523d datapathConfiguration="&{false false false false false }" interface=lxcbbee86ebe2a0 k8sPodName=local-path-storage/helper-pod-create-pvc-6c5b0e89-7b61-4d23-8539-6f6819370751 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a24f93ca18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c5b0e89-7b61-4d23-8539-6f6819370751 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a24f93ca18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c5b0e89-7b61-4d23-8539-6f6819370751 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a24f93ca18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identity=46931 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c5b0e89-7b61-4d23-8539-6f6819370751 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a24f93ca18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identity=46931 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c5b0e89-7b61-4d23-8539-6f6819370751 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a24f93ca18 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=833 identity=46931 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c5b0e89-7b61-4d23-8539-6f6819370751 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a24f93ca18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=833 identity=46931 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c5b0e89-7b61-4d23-8539-6f6819370751 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.66 606150a8-11d5-4eaa-822d-75ec21c00e0e default }" containerID=a788a4c99e337564672e055e9fcb7aca8757379250bb6774b90ceeaf00cb31dd datapathConfiguration="&{false false false false false }" interface=lxca63154940a26 k8sPodName=local-path-storage/helper-pod-create-pvc-e373e0be-0ff9-4757-9d36-cbfb3e7be841 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a788a4c99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2760 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e373e0be-0ff9-4757-9d36-cbfb3e7be841 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a788a4c99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2760 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e373e0be-0ff9-4757-9d36-cbfb3e7be841 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a788a4c99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2760 identity=46931 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e373e0be-0ff9-4757-9d36-cbfb3e7be841 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a788a4c99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2760 identity=46931 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e373e0be-0ff9-4757-9d36-cbfb3e7be841 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a788a4c99e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2760 identity=46931 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e373e0be-0ff9-4757-9d36-cbfb3e7be841 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a788a4c99e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2760 identity=46931 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e373e0be-0ff9-4757-9d36-cbfb3e7be841 subsys=daemon level=info msg="Delete endpoint request" containerID=a788a4c99e endpointID=2760 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e373e0be-0ff9-4757-9d36-cbfb3e7be841 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=a24f93ca18 endpointID=833 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6c5b0e89-7b61-4d23-8539-6f6819370751 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a788a4c99e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2760 identity=46931 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e373e0be-0ff9-4757-9d36-cbfb3e7be841 subsys=endpoint level=info msg="Removed endpoint" containerID=a24f93ca18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=833 identity=46931 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c5b0e89-7b61-4d23-8539-6f6819370751 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 4e896f4b-5639-48c0-8b69-66caf3dd323d default }" containerID=f7cbadd4155969bdf900d6876125ea90950fa8aba99a467d3a81da22636c5f52 datapathConfiguration="&{false false false false false }" interface=lxce6e30d83cc05 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7cbadd415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7cbadd415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7cbadd415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identity=4806 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7cbadd415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identity=4806 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.158 074141c9-7d9c-4d77-81a4-442fdc60bf73 default }" containerID=f24cce3c5d52bcb2c1d1cd0c2eee1a47c1dd9d6f18b332ae454cd6d42120cb92 datapathConfiguration="&{false false false false false }" interface=lxce67e43d7abca k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f24cce3c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f24cce3c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f24cce3c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=30278 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f24cce3c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=30278 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 ee01b0cf-83af-4a1c-b3f5-a7e1230305a0 default }" containerID=e2d3a152ac15c321e6ffe9414f0c7253ab4032cfca664effece6fa657048f32b datapathConfiguration="&{false false false false false }" interface=lxc7b4ae41b3020 k8sPodName=monitoring/loki-gateway-cf54cb88c-5bxbg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2d3a152ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5bxbg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2d3a152ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5bxbg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2d3a152ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identity=38122 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5bxbg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2d3a152ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identity=38122 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5bxbg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7cbadd415 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1752 identity=4806 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7cbadd415 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1752 identity=4806 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f24cce3c5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=589 identity=30278 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f24cce3c5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=589 identity=30278 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.144 a0bb31c6-d6fd-4e5d-b458-7cacf26e210f default }" containerID=dfa58e32ed9dd1a81eadf17f82620eadb056cf8cbe14f7391a65fa9df9ead798 datapathConfiguration="&{false false false false false }" interface=lxc02c990e61778 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfa58e32ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2774 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfa58e32ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2774 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dfa58e32ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2774 identity=48515 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfa58e32ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2774 identity=48515 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2d3a152ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=768 identity=38122 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5bxbg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2d3a152ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=768 identity=38122 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5bxbg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.148 7a3c2d28-1763-4278-97e5-61bbcea16360 default }" containerID=ff1f0ddb6cf8e95876855207aea37f9e30cb27f6d8621257a28953edf17a6b3f datapathConfiguration="&{false false false false false }" interface=lxc6a27d5ebd7bc k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff1f0ddb6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff1f0ddb6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=dfa58e32ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2774 identity=48515 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfa58e32ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2774 identity=48515 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff1f0ddb6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identity=3781 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff1f0ddb6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identity=3781 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff1f0ddb6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=93 identity=3781 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff1f0ddb6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=93 identity=3781 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 9e19c067-3bc4-4ea0-a9c0-7da311c917f7 default }" containerID=eb1320618c1fc53a37767131819a4b9057a1724169e3200664ea74796b908c0a datapathConfiguration="&{false false false false false }" interface=lxca555fce0742f k8sPodName=local-path-storage/helper-pod-create-pvc-02dd9f65-2afa-4676-9570-d5a023cea1ee labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb1320618c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-02dd9f65-2afa-4676-9570-d5a023cea1ee subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb1320618c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-02dd9f65-2afa-4676-9570-d5a023cea1ee subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb1320618c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identity=46931 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-02dd9f65-2afa-4676-9570-d5a023cea1ee oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb1320618c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identity=46931 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-02dd9f65-2afa-4676-9570-d5a023cea1ee subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eb1320618c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1689 identity=46931 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-02dd9f65-2afa-4676-9570-d5a023cea1ee subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb1320618c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1689 identity=46931 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-02dd9f65-2afa-4676-9570-d5a023cea1ee subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.221 3ade201a-7dce-4e7e-a5ad-ae7f603fb6ed default }" containerID=93cab1344a8e8a56671967df08d86d8936b8b0d7de8a0630dd9cab2adb2b346c datapathConfiguration="&{false false false false false }" interface=lxc42d56d42c287 k8sPodName=monitoring/vector-vbdwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93cab1344a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/vector-vbdwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93cab1344a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/vector-vbdwn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93cab1344a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=55731 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/vector-vbdwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93cab1344a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=55731 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/vector-vbdwn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93cab1344a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=52 identity=55731 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/vector-vbdwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=93cab1344a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=52 identity=55731 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/vector-vbdwn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eb1320618c endpointID=1689 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-02dd9f65-2afa-4676-9570-d5a023cea1ee subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=eb1320618c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1689 identity=46931 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-02dd9f65-2afa-4676-9570-d5a023cea1ee subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 0c72bb16-f3e9-4847-ad94-1ce9fd35ca67 default }" containerID=9b8417218c47aca5146aab7057e6a77c198b1d2f469c451f373ec4af05c9d5c4 datapathConfiguration="&{false false false false false }" interface=lxc1c8068d8a1bd k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b8417218c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b8417218c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9b8417218c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=28477 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b8417218c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=28477 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b8417218c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=17 identity=28477 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b8417218c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=17 identity=28477 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.76 57780e27-cca1-4531-af41-4246ac60cbdf default }" containerID=ad8704bd81317b6057321d6032036174d5155d7dcf813e22303a796650886bd6 datapathConfiguration="&{false false false false false }" interface=lxca230ff378303 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-pwh4b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad8704bd81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-pwh4b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad8704bd81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-pwh4b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad8704bd81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=20583 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-pwh4b oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ad8704bd81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=20583 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-pwh4b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad8704bd81 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=29 identity=20583 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-pwh4b subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad8704bd81 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=20583 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-pwh4b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.208 892acfc5-4456-42e3-a073-5fc5d730ab74 default }" containerID=eb17233edfeec6b578f852c2dd22fbbdff914552488ce3c65aad6c11a39b86a3 datapathConfiguration="&{false false false false false }" interface=lxc3f3d284d2478 k8sPodName=openstack/memcached-memcached-6479589586-g42np labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb17233edf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-g42np subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb17233edf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-g42np subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eb17233edf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-g42np line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb17233edf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 identity=26570 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-g42np oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb17233edf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 identity=26570 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-g42np subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb17233edf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4088 identity=26570 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-g42np subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb17233edf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4088 identity=26570 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-g42np subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.171 5b9e46e7-5c76-42f8-abc4-8803ef8a4156 default }" containerID=e8c8ee3001d213817722ea46d589baa771aa5db5c4fcbedf7a418063ca017806 datapathConfiguration="&{false false false false false }" interface=lxc866a80319b89 k8sPodName=local-path-storage/helper-pod-create-pvc-4d2132c3-5a30-450f-b94c-37e5a95e9352 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8c8ee3001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d2132c3-5a30-450f-b94c-37e5a95e9352 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8c8ee3001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d2132c3-5a30-450f-b94c-37e5a95e9352 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8c8ee3001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=46931 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d2132c3-5a30-450f-b94c-37e5a95e9352 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8c8ee3001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=46931 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d2132c3-5a30-450f-b94c-37e5a95e9352 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8c8ee3001 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1767 identity=46931 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d2132c3-5a30-450f-b94c-37e5a95e9352 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8c8ee3001 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1767 identity=46931 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d2132c3-5a30-450f-b94c-37e5a95e9352 subsys=daemon level=info msg="Delete endpoint request" containerID=e8c8ee3001 endpointID=1767 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4d2132c3-5a30-450f-b94c-37e5a95e9352 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e8c8ee3001 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1767 identity=46931 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d2132c3-5a30-450f-b94c-37e5a95e9352 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 b7f48d7e-2fb3-40dd-9d4e-e761b0b1206f default }" containerID=bd26dd5ee6f7a702d2d9288166f8a16ce94c4033ce2bc5f6cfab81d6a63be3bc datapathConfiguration="&{false false false false false }" interface=lxc65dbe78cedb1 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd26dd5ee6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd26dd5ee6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd26dd5ee6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identity=48343 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bd26dd5ee6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identity=48343 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd26dd5ee6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1890 identity=48343 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd26dd5ee6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1890 identity=48343 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.249 c557812a-ff9a-4b4a-9271-c29c710817b1 default }" containerID=439f8ff8e5c4f11f6c42a6bd0c117fb182081e69dea98cedbfc0c21d50f322ff datapathConfiguration="&{false false false false false }" interface=lxc92d96d7f4462 k8sPodName=openstack/keystone-api-64fbff575d-s45rm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=439f8ff8e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-api-64fbff575d-s45rm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=439f8ff8e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-api-64fbff575d-s45rm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=439f8ff8e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=19010 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-api-64fbff575d-s45rm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=439f8ff8e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=19010 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-api-64fbff575d-s45rm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.103 8d691eb1-b6ee-441d-9650-26eef7cb16ee default }" containerID=bed088dfe03839cf5a2e9249a4829221bb6072e70cca557b433f92f5de69ef47 datapathConfiguration="&{false false false false false }" interface=lxcc6c2395d050e k8sPodName=openstack/keystone-credential-setup-kvhhc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bed088dfe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-credential-setup-kvhhc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bed088dfe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=888084a3-56a9-4cf1-97bc-ba7653891e51,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=888084a3-56a9-4cf1-97bc-ba7653891e51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-credential-setup-kvhhc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=888084a3-56a9-4cf1-97bc-ba7653891e51;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=888084a3-56a9-4cf1-97bc-ba7653891e51;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bed088dfe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 identity=15610 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=888084a3-56a9-4cf1-97bc-ba7653891e51,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=888084a3-56a9-4cf1-97bc-ba7653891e51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-credential-setup-kvhhc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bed088dfe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 identity=15610 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-credential-setup-kvhhc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=439f8ff8e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=16 identity=19010 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-api-64fbff575d-s45rm subsys=endpoint level=info msg="Successful endpoint creation" containerID=439f8ff8e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=16 identity=19010 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-api-64fbff575d-s45rm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bed088dfe0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1791 identity=15610 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-credential-setup-kvhhc subsys=endpoint level=info msg="Successful endpoint creation" containerID=bed088dfe0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1791 identity=15610 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-credential-setup-kvhhc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bed088dfe0 endpointID=1791 k8sNamespace=openstack k8sPodName=keystone-credential-setup-kvhhc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=888084a3-56a9-4cf1-97bc-ba7653891e51 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=888084a3-56a9-4cf1-97bc-ba7653891e51 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bed088dfe0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1791 identity=15610 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-credential-setup-kvhhc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 14759101-a192-4670-8943-fa21d13781be default }" containerID=cb3e6a2a69c518e908825534e0948803e29ddd9624ac16322b252222cc15e222 datapathConfiguration="&{false false false false false }" interface=lxc39d5cf4f1f87 k8sPodName=openstack/keystone-db-init-4kd7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb3e6a2a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4045 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-db-init-4kd7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb3e6a2a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4045 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a2038a08-705d-4a20-84f1-c52ce1b2dee2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a2038a08-705d-4a20-84f1-c52ce1b2dee2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-db-init-4kd7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a2038a08-705d-4a20-84f1-c52ce1b2dee2;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=a2038a08-705d-4a20-84f1-c52ce1b2dee2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb3e6a2a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4045 identity=20442 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a2038a08-705d-4a20-84f1-c52ce1b2dee2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a2038a08-705d-4a20-84f1-c52ce1b2dee2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-db-init-4kd7d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb3e6a2a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4045 identity=20442 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-db-init-4kd7d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cb3e6a2a69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4045 identity=20442 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-db-init-4kd7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb3e6a2a69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4045 identity=20442 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-db-init-4kd7d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb3e6a2a69 endpointID=4045 k8sNamespace=openstack k8sPodName=keystone-db-init-4kd7d subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a2038a08-705d-4a20-84f1-c52ce1b2dee2 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=a2038a08-705d-4a20-84f1-c52ce1b2dee2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cb3e6a2a69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4045 identity=20442 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-db-init-4kd7d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 9be78bf5-6082-4723-9bd9-76f41f5dbc48 default }" containerID=b63b9143b31d9ffdfbaadc9a0290e605fffc09e38b1c5fa063259053373303a3 datapathConfiguration="&{false false false false false }" interface=lxc1fdf8083f246 k8sPodName=openstack/keystone-fernet-setup-9nlpc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b63b9143b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-9nlpc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b63b9143b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f458ce5b-e5cb-4e5f-89e7-d22c47924eec,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f458ce5b-e5cb-4e5f-89e7-d22c47924eec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-9nlpc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b63b9143b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-9nlpc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f458ce5b-e5cb-4e5f-89e7-d22c47924eec;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=f458ce5b-e5cb-4e5f-89e7-d22c47924eec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b63b9143b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=50118 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f458ce5b-e5cb-4e5f-89e7-d22c47924eec,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f458ce5b-e5cb-4e5f-89e7-d22c47924eec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-9nlpc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b63b9143b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=50118 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-9nlpc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b63b9143b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2 identity=50118 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-9nlpc subsys=endpoint level=info msg="Successful endpoint creation" containerID=b63b9143b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2 identity=50118 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-9nlpc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03225141017490227 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=b63b9143b3 endpointID=2 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-9nlpc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f458ce5b-e5cb-4e5f-89e7-d22c47924eec k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=f458ce5b-e5cb-4e5f-89e7-d22c47924eec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b63b9143b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2 identity=50118 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-9nlpc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 c616b897-2172-4367-9d56-665aed47dc03 default }" containerID=aee63c60052d38edfb76beb71470538718ff5b306a110a9e8c2dbeb9e8177d73 datapathConfiguration="&{false false false false false }" interface=lxc1e3bcf949f3a k8sPodName=openstack/keystone-db-sync-mtg27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aee63c6005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1750 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-mtg27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aee63c6005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1750 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6e6f7762-cb87-4248-b2b1-ec8b54738d8c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=6e6f7762-cb87-4248-b2b1-ec8b54738d8c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-mtg27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6e6f7762-cb87-4248-b2b1-ec8b54738d8c;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=6e6f7762-cb87-4248-b2b1-ec8b54738d8c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=aee63c6005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1750 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-mtg27 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=aee63c6005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1750 identity=2637 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6e6f7762-cb87-4248-b2b1-ec8b54738d8c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=6e6f7762-cb87-4248-b2b1-ec8b54738d8c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-mtg27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aee63c6005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1750 identity=2637 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-mtg27 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aee63c6005 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1750 identity=2637 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-mtg27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aee63c6005 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1750 identity=2637 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-mtg27 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aee63c6005 endpointID=1750 k8sNamespace=openstack k8sPodName=keystone-db-sync-mtg27 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6e6f7762-cb87-4248-b2b1-ec8b54738d8c k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=6e6f7762-cb87-4248-b2b1-ec8b54738d8c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=aee63c6005 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1750 identity=2637 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-mtg27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 cc2b844f-1bf4-4355-9f44-949b7d6c5566 default }" containerID=66c7b86b79d862adb312d8196146d2f4c101f18e75d12ad9a7ff8fd543cb77e5 datapathConfiguration="&{false false false false false }" interface=lxc345362de9668 k8sPodName=openstack/keystone-rabbit-init-bgwrc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66c7b86b79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-rabbit-init-bgwrc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66c7b86b79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=84fcba70-9c78-4e30-9da9-ffb503d8f00f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=84fcba70-9c78-4e30-9da9-ffb503d8f00f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-rabbit-init-bgwrc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=84fcba70-9c78-4e30-9da9-ffb503d8f00f;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=84fcba70-9c78-4e30-9da9-ffb503d8f00f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66c7b86b79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 identity=15590 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=84fcba70-9c78-4e30-9da9-ffb503d8f00f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=84fcba70-9c78-4e30-9da9-ffb503d8f00f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-rabbit-init-bgwrc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=66c7b86b79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 identity=15590 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-rabbit-init-bgwrc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66c7b86b79 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=496 identity=15590 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-rabbit-init-bgwrc subsys=endpoint level=info msg="Successful endpoint creation" containerID=66c7b86b79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=496 identity=15590 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-rabbit-init-bgwrc subsys=daemon level=info msg="Delete endpoint request" containerID=66c7b86b79 endpointID=496 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-bgwrc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=84fcba70-9c78-4e30-9da9-ffb503d8f00f k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=84fcba70-9c78-4e30-9da9-ffb503d8f00f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=66c7b86b79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=496 identity=15590 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-rabbit-init-bgwrc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 f10a7d61-bd77-448e-8cb1-17e9029cd3f0 default }" containerID=5290bfdc769744ed68a077d2e0dc43c5238dbd44df0f27b75a28b858458b902b datapathConfiguration="&{false false false false false }" interface=lxc86b5eb531939 k8sPodName=openstack/keystone-domain-manage-d5zl4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5290bfdc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-domain-manage-d5zl4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5290bfdc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=78d6a84b-0602-4e48-88be-d107ec380e96,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=78d6a84b-0602-4e48-88be-d107ec380e96,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-domain-manage-d5zl4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=78d6a84b-0602-4e48-88be-d107ec380e96;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=78d6a84b-0602-4e48-88be-d107ec380e96;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5290bfdc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identity=36010 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=78d6a84b-0602-4e48-88be-d107ec380e96,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=78d6a84b-0602-4e48-88be-d107ec380e96,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-domain-manage-d5zl4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5290bfdc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identity=36010 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-domain-manage-d5zl4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5290bfdc76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3694 identity=36010 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-domain-manage-d5zl4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5290bfdc76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3694 identity=36010 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-domain-manage-d5zl4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5290bfdc76 endpointID=3694 k8sNamespace=openstack k8sPodName=keystone-domain-manage-d5zl4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=78d6a84b-0602-4e48-88be-d107ec380e96 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=78d6a84b-0602-4e48-88be-d107ec380e96 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5290bfdc76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3694 identity=36010 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-domain-manage-d5zl4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 fd170790-c12c-481a-b213-ebbc0ddc778b default }" containerID=ebe12a5eb30b8261239a687438feb159384af22a16d8e910177f97ca2a941157 datapathConfiguration="&{false false false false false }" interface=lxcb8af02943e7c k8sPodName=openstack/keystone-bootstrap-x7lnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebe12a5eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-x7lnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebe12a5eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=159d5a6f-c56f-4a2e-ab7e-0cc3d1a6b578,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=159d5a6f-c56f-4a2e-ab7e-0cc3d1a6b578,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-x7lnf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=159d5a6f-c56f-4a2e-ab7e-0cc3d1a6b578;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=159d5a6f-c56f-4a2e-ab7e-0cc3d1a6b578;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ebe12a5eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-x7lnf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ebe12a5eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=10312 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=159d5a6f-c56f-4a2e-ab7e-0cc3d1a6b578,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=159d5a6f-c56f-4a2e-ab7e-0cc3d1a6b578,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-x7lnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebe12a5eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=10312 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-x7lnf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ebe12a5eb3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=13 identity=10312 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-x7lnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebe12a5eb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=13 identity=10312 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-x7lnf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ebe12a5eb3 endpointID=13 k8sNamespace=openstack k8sPodName=keystone-bootstrap-x7lnf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=159d5a6f-c56f-4a2e-ab7e-0cc3d1a6b578 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=159d5a6f-c56f-4a2e-ab7e-0cc3d1a6b578 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ebe12a5eb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=13 identity=10312 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-x7lnf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 67e53bc2-8fd8-4d66-b368-2703e4e7c770 default }" containerID=e2cb393fb4a9df02bc6865546af39623309089e79919d29dbcac731fd553ead0 datapathConfiguration="&{false false false false false }" interface=lxc7e9cfe36b150 k8sPodName=local-path-storage/helper-pod-create-pvc-b27d9910-9f17-404b-9373-fc640971eb69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2cb393fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2647 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b27d9910-9f17-404b-9373-fc640971eb69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2cb393fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2647 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b27d9910-9f17-404b-9373-fc640971eb69 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2cb393fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2647 identity=46931 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b27d9910-9f17-404b-9373-fc640971eb69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2cb393fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2647 identity=46931 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b27d9910-9f17-404b-9373-fc640971eb69 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2cb393fb4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2647 identity=46931 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b27d9910-9f17-404b-9373-fc640971eb69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2cb393fb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2647 identity=46931 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b27d9910-9f17-404b-9373-fc640971eb69 subsys=daemon level=info msg="Delete endpoint request" containerID=e2cb393fb4 endpointID=2647 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b27d9910-9f17-404b-9373-fc640971eb69 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e2cb393fb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2647 identity=46931 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b27d9910-9f17-404b-9373-fc640971eb69 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 0d3dc842-b93d-40b5-8577-fe97f88bd67c default }" containerID=7f13f226bda55a697e6a5647b0aaa6d92216db18ef734823014d0f8bd4852855 datapathConfiguration="&{false false false false false }" interface=lxcd437f2135d9c k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f13f226bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f13f226bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f13f226bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=4613 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f13f226bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=4613 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7f13f226bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=560 identity=4613 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f13f226bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=560 identity=4613 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.39 4f824470-f427-4c31-8502-4dc68a083eb2 default }" containerID=57e1f2d8743fd351cd474c36c23478493801e0855dd02421db91eece0ce638ea datapathConfiguration="&{false false false false false }" interface=lxca98f01b6bfb5 k8sPodName=openstack/barbican-api-668f5f76dd-bqq6z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57e1f2d874 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-api-668f5f76dd-bqq6z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57e1f2d874 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-api-668f5f76dd-bqq6z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57e1f2d874 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identity=45128 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-api-668f5f76dd-bqq6z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57e1f2d874 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identity=45128 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-api-668f5f76dd-bqq6z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 90a7b7c2-76dd-4cb0-a6f0-d6bee80592fc default }" containerID=11cd84931157f393e7fd9917f671fe3d6f27a99559e62fda89609cfc3c852984 datapathConfiguration="&{false false false false false }" interface=lxc561301116748 k8sPodName=openstack/barbican-db-init-cznwr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11cd849311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3698 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-db-init-cznwr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11cd849311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3698 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8da583c5-6c66-4063-9899-13e039da96d7,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=8da583c5-6c66-4063-9899-13e039da96d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-db-init-cznwr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8da583c5-6c66-4063-9899-13e039da96d7;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=8da583c5-6c66-4063-9899-13e039da96d7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11cd849311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3698 identity=8028 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8da583c5-6c66-4063-9899-13e039da96d7,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=8da583c5-6c66-4063-9899-13e039da96d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-db-init-cznwr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11cd849311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3698 identity=8028 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-db-init-cznwr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57e1f2d874 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3682 identity=45128 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-api-668f5f76dd-bqq6z subsys=endpoint level=info msg="Successful endpoint creation" containerID=57e1f2d874 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3682 identity=45128 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-api-668f5f76dd-bqq6z subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=11cd849311 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3698 identity=8028 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-db-init-cznwr subsys=endpoint level=info msg="Successful endpoint creation" containerID=11cd849311 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3698 identity=8028 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-db-init-cznwr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=11cd849311 endpointID=3698 k8sNamespace=openstack k8sPodName=barbican-db-init-cznwr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8da583c5-6c66-4063-9899-13e039da96d7 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=8da583c5-6c66-4063-9899-13e039da96d7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=11cd849311 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3698 identity=8028 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-db-init-cznwr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 fce0bd42-31b4-4c6a-af59-5ba24677a29f default }" containerID=76f295a466d9b5b465ddaae4cb5581ab4b355ee96b8ff437bade0dc84dc9248f datapathConfiguration="&{false false false false false }" interface=lxc54374894120a k8sPodName=openstack/barbican-db-sync-z2gbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76f295a466 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-z2gbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76f295a466 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a570221f-73c1-4991-be99-bf63f4582ef9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a570221f-73c1-4991-be99-bf63f4582ef9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-z2gbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a570221f-73c1-4991-be99-bf63f4582ef9;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=a570221f-73c1-4991-be99-bf63f4582ef9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76f295a466 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identity=51117 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a570221f-73c1-4991-be99-bf63f4582ef9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a570221f-73c1-4991-be99-bf63f4582ef9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-z2gbb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=76f295a466 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identity=51117 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-z2gbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76f295a466 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=218 identity=51117 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-z2gbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=76f295a466 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=218 identity=51117 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-z2gbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76f295a466 endpointID=218 k8sNamespace=openstack k8sPodName=barbican-db-sync-z2gbb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a570221f-73c1-4991-be99-bf63f4582ef9 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=a570221f-73c1-4991-be99-bf63f4582ef9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=76f295a466 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=218 identity=51117 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-z2gbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 f3b93529-4123-4fbf-841c-a94756051c5c default }" containerID=286bf206b11adb7222101a4fbd30d95dd69822d8ac50fbfcb8c038aa631abff7 datapathConfiguration="&{false false false false false }" interface=lxc8ce4d297d450 k8sPodName=openstack/barbican-rabbit-init-j4cpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=286bf206b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-j4cpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=286bf206b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=199692bc-405e-4734-81a5-9c5cccde3ac7,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=199692bc-405e-4734-81a5-9c5cccde3ac7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-j4cpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=199692bc-405e-4734-81a5-9c5cccde3ac7;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=199692bc-405e-4734-81a5-9c5cccde3ac7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=286bf206b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-j4cpf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=286bf206b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 identity=14452 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=199692bc-405e-4734-81a5-9c5cccde3ac7,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=199692bc-405e-4734-81a5-9c5cccde3ac7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-j4cpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=286bf206b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 identity=14452 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-j4cpf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=286bf206b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1383 identity=14452 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-j4cpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=286bf206b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1383 identity=14452 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-j4cpf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=286bf206b1 endpointID=1383 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-j4cpf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=199692bc-405e-4734-81a5-9c5cccde3ac7 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=199692bc-405e-4734-81a5-9c5cccde3ac7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=286bf206b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1383 identity=14452 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-j4cpf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 24e0d229-1538-4f58-bcba-e253743154fa default }" containerID=f47a97eedb6f983fdccf089b6389a141e905e1e82a1f388330401663b681a89d datapathConfiguration="&{false false false false false }" interface=lxca92e2c475e3f k8sPodName=openstack/barbican-ks-service-lgcw5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f47a97eedb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-lgcw5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f47a97eedb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f7f56eec-58db-431e-978d-b9a212af0575,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=f7f56eec-58db-431e-978d-b9a212af0575,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-lgcw5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f7f56eec-58db-431e-978d-b9a212af0575;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=f7f56eec-58db-431e-978d-b9a212af0575;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f47a97eedb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identity=6400 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f7f56eec-58db-431e-978d-b9a212af0575,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=f7f56eec-58db-431e-978d-b9a212af0575,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-lgcw5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f47a97eedb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identity=6400 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-lgcw5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f47a97eedb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=470 identity=6400 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-lgcw5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f47a97eedb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=470 identity=6400 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-lgcw5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f47a97eedb endpointID=470 k8sNamespace=openstack k8sPodName=barbican-ks-service-lgcw5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f7f56eec-58db-431e-978d-b9a212af0575 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=f7f56eec-58db-431e-978d-b9a212af0575 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f47a97eedb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=470 identity=6400 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-service-lgcw5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 1712db67-0d17-4381-9c43-3981e6230819 default }" containerID=05c3dff0ba3ac6bf2b039029d4dd49e390fe0ab14be0978b3220e3997865faf4 datapathConfiguration="&{false false false false false }" interface=lxcab2ee5a981b2 k8sPodName=openstack/barbican-ks-endpoints-k2ldt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05c3dff0ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2ldt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05c3dff0ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=17a578ba-3692-432b-ab6f-d7412975e843,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=17a578ba-3692-432b-ab6f-d7412975e843,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2ldt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=05c3dff0ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2ldt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=17a578ba-3692-432b-ab6f-d7412975e843;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=17a578ba-3692-432b-ab6f-d7412975e843;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05c3dff0ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=10224 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=17a578ba-3692-432b-ab6f-d7412975e843,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=17a578ba-3692-432b-ab6f-d7412975e843,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2ldt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05c3dff0ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=10224 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2ldt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05c3dff0ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=868 identity=10224 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2ldt subsys=endpoint level=info msg="Successful endpoint creation" containerID=05c3dff0ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=868 identity=10224 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2ldt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=05c3dff0ba endpointID=868 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-k2ldt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=17a578ba-3692-432b-ab6f-d7412975e843 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=17a578ba-3692-432b-ab6f-d7412975e843 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=05c3dff0ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=868 identity=10224 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2ldt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 68e3a7f7-f483-49b5-969a-5b0d82d9e5f9 default }" containerID=26c50644b3f49de36352ec5e1867c980c2eedd3d07db6b3631dcdfa235a09449 datapathConfiguration="&{false false false false false }" interface=lxc8654a0364607 k8sPodName=openstack/barbican-ks-user-fwfhz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26c50644b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3555 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-fwfhz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26c50644b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3555 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2c4b7c40-f45b-442c-a7d7-0c9c4cbe7635,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=2c4b7c40-f45b-442c-a7d7-0c9c4cbe7635,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-fwfhz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2c4b7c40-f45b-442c-a7d7-0c9c4cbe7635;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=2c4b7c40-f45b-442c-a7d7-0c9c4cbe7635;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=26c50644b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3555 identity=8990 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2c4b7c40-f45b-442c-a7d7-0c9c4cbe7635,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=2c4b7c40-f45b-442c-a7d7-0c9c4cbe7635,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-fwfhz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26c50644b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3555 identity=8990 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-fwfhz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26c50644b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3555 identity=8990 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-fwfhz subsys=endpoint level=info msg="Successful endpoint creation" containerID=26c50644b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3555 identity=8990 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-fwfhz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=26c50644b3 endpointID=3555 k8sNamespace=openstack k8sPodName=barbican-ks-user-fwfhz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2c4b7c40-f45b-442c-a7d7-0c9c4cbe7635 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=2c4b7c40-f45b-442c-a7d7-0c9c4cbe7635 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=26c50644b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3555 identity=8990 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-fwfhz subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.10 426b7aea-9b2b-4be8-8019-00627af39778 default }" containerID=54fc31c5586c6ee31fd2e757716a236f0138ac244bdf0b9f313df0cbccab1879 datapathConfiguration="&{false false false false false }" interface=lxcc69b26019ad2 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-phl79 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54fc31c558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3880 ipv4=10.0.0.10 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-phl79 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54fc31c558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3880 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.10 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-phl79 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=54fc31c558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3880 identity=11032 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.10 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-phl79 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54fc31c558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3880 identity=11032 ipv4=10.0.0.10 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-phl79 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54fc31c558 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3880 identity=11032 ipv4=10.0.0.10 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-phl79 subsys=endpoint level=info msg="Successful endpoint creation" containerID=54fc31c558 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3880 identity=11032 ipv4=10.0.0.10 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-phl79 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.56 6bdd0078-24a0-47e5-8b33-6c5915695dbf default }" containerID=307c26c5f1aa1a98551c46b9f46412255d612e673c8ebd730b1d81426682d1ec datapathConfiguration="&{false false false false false }" interface=lxc684ddd6bda9d k8sPodName=openstack/rook-ceph-detect-version-zvsgf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=307c26c5f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zvsgf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=307c26c5f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=106faf38-c96a-48b6-9d80-013a844c767e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=106faf38-c96a-48b6-9d80-013a844c767e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zvsgf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=106faf38-c96a-48b6-9d80-013a844c767e;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=106faf38-c96a-48b6-9d80-013a844c767e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=307c26c5f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 identity=54867 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=106faf38-c96a-48b6-9d80-013a844c767e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=106faf38-c96a-48b6-9d80-013a844c767e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zvsgf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=307c26c5f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 identity=54867 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zvsgf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=307c26c5f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2807 identity=54867 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zvsgf subsys=endpoint level=info msg="Successful endpoint creation" containerID=307c26c5f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2807 identity=54867 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zvsgf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=307c26c5f1 endpointID=2807 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-zvsgf subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=106faf38-c96a-48b6-9d80-013a844c767e k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=106faf38-c96a-48b6-9d80-013a844c767e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=307c26c5f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2807 identity=54867 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zvsgf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 37873aff-ca7e-49cb-8acb-4b79e07dc086 default }" containerID=50843f82d15462df455969e016c1f08d39f7194cfc0c1dad07a4c7a919f94006 datapathConfiguration="&{false false false false false }" interface=lxc10cc376ad75d k8sPodName=openstack/ceph-object-controller-detect-version-6xfsv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50843f82d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6xfsv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50843f82d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=c5a36d03-9fde-4d6c-bf67-cd5d9671eb60,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=c5a36d03-9fde-4d6c-bf67-cd5d9671eb60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6xfsv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=c5a36d03-9fde-4d6c-bf67-cd5d9671eb60;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=c5a36d03-9fde-4d6c-bf67-cd5d9671eb60;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=50843f82d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identity=35813 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=c5a36d03-9fde-4d6c-bf67-cd5d9671eb60,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=c5a36d03-9fde-4d6c-bf67-cd5d9671eb60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6xfsv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50843f82d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identity=35813 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6xfsv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50843f82d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=443 identity=35813 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6xfsv subsys=endpoint level=info msg="Successful endpoint creation" containerID=50843f82d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=443 identity=35813 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6xfsv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=50843f82d1 endpointID=443 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-6xfsv subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=c5a36d03-9fde-4d6c-bf67-cd5d9671eb60 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=c5a36d03-9fde-4d6c-bf67-cd5d9671eb60 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=50843f82d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=443 identity=35813 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6xfsv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 3aec8ed9-eadc-4130-9735-4a0870ce48f3 default }" containerID=c8e60eaa2dfbdb5de0ff219617817761ee5101f6d6ecff0952f13df1506299ee datapathConfiguration="&{false false false false false }" interface=lxc3e387830c285 k8sPodName=local-path-storage/helper-pod-create-pvc-cb97c5fe-df59-452f-8cf2-608b121c1416 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8e60eaa2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1448 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb97c5fe-df59-452f-8cf2-608b121c1416 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8e60eaa2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1448 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb97c5fe-df59-452f-8cf2-608b121c1416 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8e60eaa2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1448 identity=46931 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb97c5fe-df59-452f-8cf2-608b121c1416 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8e60eaa2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1448 identity=46931 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb97c5fe-df59-452f-8cf2-608b121c1416 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8e60eaa2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1448 identity=46931 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb97c5fe-df59-452f-8cf2-608b121c1416 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8e60eaa2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1448 identity=46931 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb97c5fe-df59-452f-8cf2-608b121c1416 subsys=daemon level=info msg="Delete endpoint request" containerID=c8e60eaa2d endpointID=1448 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cb97c5fe-df59-452f-8cf2-608b121c1416 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c8e60eaa2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1448 identity=46931 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb97c5fe-df59-452f-8cf2-608b121c1416 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 6d5b844b-3428-4543-981e-cd3c241b5a3f default }" containerID=8eb32785beb7e296ec0721fa006dadeff76c0fc848c2089005580da5d2c59d1a datapathConfiguration="&{false false false false false }" interface=lxcd6efce1f37de k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8eb32785be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8eb32785be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8eb32785be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8eb32785be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identity=3496 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8eb32785be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identity=3496 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8eb32785be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1785 identity=3496 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8eb32785be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1785 identity=3496 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 481c0818-969a-4a8f-a1a9-11e7c91fb347 default }" containerID=f8c99c0bed15cf1f3c21c6bf3320ccfaaea23891134a361c78e4f20c66e9be8f datapathConfiguration="&{false false false false false }" interface=lxc3296afd38e36 k8sPodName=openstack/glance-db-init-nwn8n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8c99c0bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-nwn8n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8c99c0bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3dd0f2aa-c8d0-4bd4-84bb-fb8971658e7f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=3dd0f2aa-c8d0-4bd4-84bb-fb8971658e7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-nwn8n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3dd0f2aa-c8d0-4bd4-84bb-fb8971658e7f;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=3dd0f2aa-c8d0-4bd4-84bb-fb8971658e7f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8c99c0bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 identity=28339 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3dd0f2aa-c8d0-4bd4-84bb-fb8971658e7f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=3dd0f2aa-c8d0-4bd4-84bb-fb8971658e7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-nwn8n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8c99c0bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 identity=28339 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-nwn8n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8c99c0bed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1271 identity=28339 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-nwn8n subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8c99c0bed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1271 identity=28339 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-nwn8n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.241 90add210-da65-4eaa-b9f6-24dcb3730a47 default }" containerID=9a6a13e49edca43803eeb42072759bd5b02789f57ddf85f10392de18b00d2b63 datapathConfiguration="&{false false false false false }" interface=lxc08627f870d2c k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8lhwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a6a13e49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1592 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8lhwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a6a13e49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1592 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8lhwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9a6a13e49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1592 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8lhwh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9a6a13e49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1592 identity=11273 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8lhwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a6a13e49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1592 identity=11273 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8lhwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 6a041422-4a8e-4ee5-91c5-88f2833d10e4 default }" containerID=144825179dc7c13531c30969a30705ce4dc0d4f3d67885aa5accba0dd23eef2d datapathConfiguration="&{false false false false false }" interface=lxc15056778bb76 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wmff9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=144825179d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wmff9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=144825179d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wmff9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=144825179d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identity=19854 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wmff9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=144825179d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identity=19854 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wmff9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a6a13e49e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1592 identity=11273 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8lhwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a6a13e49e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1592 identity=11273 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8lhwh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=144825179d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=165 identity=19854 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wmff9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=144825179d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=165 identity=19854 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wmff9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f8c99c0bed endpointID=1271 k8sNamespace=openstack k8sPodName=glance-db-init-nwn8n subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3dd0f2aa-c8d0-4bd4-84bb-fb8971658e7f k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=3dd0f2aa-c8d0-4bd4-84bb-fb8971658e7f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f8c99c0bed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1271 identity=28339 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-nwn8n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 e10d8c63-32b4-4fb8-ad1f-2e019cdf6fb2 default }" containerID=9f9c0799df7eaa11027f476a5328a0c82665ae1a129e9e3c8896ac21b8f9040a datapathConfiguration="&{false false false false false }" interface=lxc4cc7383f9965 k8sPodName=openstack/glance-db-sync-qfgsp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f9c0799df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-db-sync-qfgsp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f9c0799df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0f25685a-bc96-473c-8a21-4162112c6eb4,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0f25685a-bc96-473c-8a21-4162112c6eb4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-db-sync-qfgsp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0f25685a-bc96-473c-8a21-4162112c6eb4;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=0f25685a-bc96-473c-8a21-4162112c6eb4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f9c0799df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=4435 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0f25685a-bc96-473c-8a21-4162112c6eb4,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0f25685a-bc96-473c-8a21-4162112c6eb4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-db-sync-qfgsp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f9c0799df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=4435 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-db-sync-qfgsp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9f9c0799df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=327 identity=4435 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-db-sync-qfgsp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f9c0799df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=327 identity=4435 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-db-sync-qfgsp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f9c0799df endpointID=327 k8sNamespace=openstack k8sPodName=glance-db-sync-qfgsp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0f25685a-bc96-473c-8a21-4162112c6eb4 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=0f25685a-bc96-473c-8a21-4162112c6eb4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9f9c0799df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=327 identity=4435 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-db-sync-qfgsp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 56600dbe-0f6d-4126-9244-dfaf47d07428 default }" containerID=a9bb096bcdb97ff8439e5bf1ed3dc71bbcf47a31db8449fe9b07f1dcb3020b5d datapathConfiguration="&{false false false false false }" interface=lxcde023c21494d k8sPodName=openstack/glance-rabbit-init-gngnj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9bb096bcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-rabbit-init-gngnj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9bb096bcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7ed4efbb-6dcf-4e6d-a863-861029d48743,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7ed4efbb-6dcf-4e6d-a863-861029d48743,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-rabbit-init-gngnj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7ed4efbb-6dcf-4e6d-a863-861029d48743;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7ed4efbb-6dcf-4e6d-a863-861029d48743;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9bb096bcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identity=7802 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7ed4efbb-6dcf-4e6d-a863-861029d48743,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7ed4efbb-6dcf-4e6d-a863-861029d48743,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-rabbit-init-gngnj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9bb096bcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identity=7802 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-rabbit-init-gngnj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a9bb096bcd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1022 identity=7802 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-rabbit-init-gngnj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9bb096bcd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1022 identity=7802 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-rabbit-init-gngnj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a9bb096bcd endpointID=1022 k8sNamespace=openstack k8sPodName=glance-rabbit-init-gngnj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7ed4efbb-6dcf-4e6d-a863-861029d48743 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7ed4efbb-6dcf-4e6d-a863-861029d48743 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a9bb096bcd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1022 identity=7802 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-rabbit-init-gngnj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 25469eb1-8fbd-4308-a7d4-b86c7854d2b5 default }" containerID=b03fc03bdbcefa669c34ee5c97ad7905a6dec0dffd567ef283f903facf62378d datapathConfiguration="&{false false false false false }" interface=lxc97f341f0bc6d k8sPodName=openstack/glance-ks-service-kdsx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b03fc03bdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-kdsx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b03fc03bdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cd15fac4-eabc-4ce9-abd5-727bb02d7108,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=cd15fac4-eabc-4ce9-abd5-727bb02d7108,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-kdsx8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cd15fac4-eabc-4ce9-abd5-727bb02d7108;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=cd15fac4-eabc-4ce9-abd5-727bb02d7108;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b03fc03bdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 identity=26092 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cd15fac4-eabc-4ce9-abd5-727bb02d7108,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=cd15fac4-eabc-4ce9-abd5-727bb02d7108,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-kdsx8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b03fc03bdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 identity=26092 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-kdsx8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b03fc03bdb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=625 identity=26092 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-kdsx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b03fc03bdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=625 identity=26092 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-kdsx8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b03fc03bdb endpointID=625 k8sNamespace=openstack k8sPodName=glance-ks-service-kdsx8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cd15fac4-eabc-4ce9-abd5-727bb02d7108 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=cd15fac4-eabc-4ce9-abd5-727bb02d7108 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b03fc03bdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=625 identity=26092 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-kdsx8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 dce97aec-7b75-4291-bca7-482ead144d63 default }" containerID=87f1f0360ebcdbdd1d8f8ad63912fef41159049683310e04553ee4f2d6aa57a4 datapathConfiguration="&{false false false false false }" interface=lxc1eaadeb82363 k8sPodName=openstack/glance-ks-endpoints-946nm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87f1f0360e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-ks-endpoints-946nm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87f1f0360e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0136f9e4-50fe-4007-b7b9-d0a5189c8030,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0136f9e4-50fe-4007-b7b9-d0a5189c8030,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-ks-endpoints-946nm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0136f9e4-50fe-4007-b7b9-d0a5189c8030;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0136f9e4-50fe-4007-b7b9-d0a5189c8030;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87f1f0360e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identity=9356 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0136f9e4-50fe-4007-b7b9-d0a5189c8030,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0136f9e4-50fe-4007-b7b9-d0a5189c8030,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-ks-endpoints-946nm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87f1f0360e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identity=9356 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-ks-endpoints-946nm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=87f1f0360e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3338 identity=9356 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-ks-endpoints-946nm subsys=endpoint level=info msg="Successful endpoint creation" containerID=87f1f0360e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3338 identity=9356 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-ks-endpoints-946nm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=87f1f0360e endpointID=3338 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-946nm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0136f9e4-50fe-4007-b7b9-d0a5189c8030 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0136f9e4-50fe-4007-b7b9-d0a5189c8030 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=87f1f0360e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3338 identity=9356 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-ks-endpoints-946nm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 e3700f59-8141-4db4-a9c3-80e54b47d930 default }" containerID=10f10189b89449994e09526dc1ee2bf8902952d911b244bcece42821642dd390 datapathConfiguration="&{false false false false false }" interface=lxc80bf6d977740 k8sPodName=openstack/glance-ks-user-54mzt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10f10189b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1844 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-ks-user-54mzt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10f10189b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1844 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=489c468a-c7de-4744-ad91-a8613dd59eef,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=489c468a-c7de-4744-ad91-a8613dd59eef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-ks-user-54mzt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=489c468a-c7de-4744-ad91-a8613dd59eef;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=489c468a-c7de-4744-ad91-a8613dd59eef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10f10189b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1844 identity=6771 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=489c468a-c7de-4744-ad91-a8613dd59eef,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=489c468a-c7de-4744-ad91-a8613dd59eef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-ks-user-54mzt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=10f10189b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1844 identity=6771 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-ks-user-54mzt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10f10189b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1844 identity=6771 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-ks-user-54mzt subsys=endpoint level=info msg="Successful endpoint creation" containerID=10f10189b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1844 identity=6771 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-ks-user-54mzt subsys=daemon level=info msg="Delete endpoint request" containerID=10f10189b8 endpointID=1844 k8sNamespace=openstack k8sPodName=glance-ks-user-54mzt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=489c468a-c7de-4744-ad91-a8613dd59eef k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=489c468a-c7de-4744-ad91-a8613dd59eef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=10f10189b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1844 identity=6771 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-ks-user-54mzt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 3c80f6d2-eeb4-4896-af12-40a5fcd51753 default }" containerID=59eedb825d7f255318f742bc7cbf4bdd9cf50bc7bfe9ba4bfd44939c5d98a3ee datapathConfiguration="&{false false false false false }" interface=lxcd0ff781093d1 k8sPodName=openstack/glance-metadefs-load-5l4nd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59eedb825d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3299 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-metadefs-load-5l4nd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59eedb825d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3299 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a831fb15-1b31-44a3-a3e4-93c06467b522,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a831fb15-1b31-44a3-a3e4-93c06467b522,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-metadefs-load-5l4nd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a831fb15-1b31-44a3-a3e4-93c06467b522;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=a831fb15-1b31-44a3-a3e4-93c06467b522;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59eedb825d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3299 identity=50813 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a831fb15-1b31-44a3-a3e4-93c06467b522,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a831fb15-1b31-44a3-a3e4-93c06467b522,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-metadefs-load-5l4nd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59eedb825d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3299 identity=50813 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-metadefs-load-5l4nd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=59eedb825d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3299 identity=50813 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-metadefs-load-5l4nd subsys=endpoint level=info msg="Successful endpoint creation" containerID=59eedb825d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3299 identity=50813 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-metadefs-load-5l4nd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=59eedb825d endpointID=3299 k8sNamespace=openstack k8sPodName=glance-metadefs-load-5l4nd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a831fb15-1b31-44a3-a3e4-93c06467b522 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=a831fb15-1b31-44a3-a3e4-93c06467b522 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=59eedb825d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3299 identity=50813 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-metadefs-load-5l4nd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 419e80b0-30ed-46d6-8b94-23373c1f4c6e default }" containerID=6278fb834f5aa9ab66a89c6fab2e9222fb89f260d0cc8ff7b768d0ce11f0b8e1 datapathConfiguration="&{false false false false false }" interface=lxccffe45d31763 k8sPodName=openstack/glance-storage-init-9mj2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6278fb834f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-storage-init-9mj2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6278fb834f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c38022bd-1adc-4b90-8547-a1cb89501a2e,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=c38022bd-1adc-4b90-8547-a1cb89501a2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-storage-init-9mj2v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c38022bd-1adc-4b90-8547-a1cb89501a2e;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=c38022bd-1adc-4b90-8547-a1cb89501a2e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6278fb834f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=623 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c38022bd-1adc-4b90-8547-a1cb89501a2e,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=c38022bd-1adc-4b90-8547-a1cb89501a2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-storage-init-9mj2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6278fb834f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=623 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-storage-init-9mj2v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6278fb834f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1912 identity=623 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-storage-init-9mj2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=6278fb834f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1912 identity=623 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-storage-init-9mj2v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6278fb834f endpointID=1912 k8sNamespace=openstack k8sPodName=glance-storage-init-9mj2v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c38022bd-1adc-4b90-8547-a1cb89501a2e k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=c38022bd-1adc-4b90-8547-a1cb89501a2e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6278fb834f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1912 identity=623 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-storage-init-9mj2v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 d5b7be24-14d0-49fc-b506-bcec4245b0c6 default }" containerID=5a0a37b756dd422aee0ac312955fab94714b69bf79cd19eda7be9230c996973e datapathConfiguration="&{false false false false false }" interface=lxcbb91b25ea927 k8sPodName=openstack/glance-api-69468b9666-xmlqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a0a37b756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-api-69468b9666-xmlqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a0a37b756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-api-69468b9666-xmlqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a0a37b756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=25690 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-api-69468b9666-xmlqb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a0a37b756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=25690 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-api-69468b9666-xmlqb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5a0a37b756 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1097 identity=25690 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-api-69468b9666-xmlqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a0a37b756 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1097 identity=25690 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-api-69468b9666-xmlqb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 2c687ac6-32e8-4bbb-98b9-d1bc5701da6f default }" containerID=59702077d28d2a466856b2ff7949fe7acda8df43cae06cde566dd8defd93b48c datapathConfiguration="&{false false false false false }" interface=lxc03c055ed10d3 k8sPodName=openstack/staffeln-conductor-8576c4855d-q8kt2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59702077d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1617 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-conductor-8576c4855d-q8kt2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59702077d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1617 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-conductor-8576c4855d-q8kt2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59702077d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1617 identity=52402 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-conductor-8576c4855d-q8kt2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59702077d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1617 identity=52402 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-conductor-8576c4855d-q8kt2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 cead0782-177d-4652-9cb9-2dd2d73cf988 default }" containerID=3c6c0dac62a44d200a01f30c9f657f737de714beb6418d236e1f9367c285871e datapathConfiguration="&{false false false false false }" interface=lxc6a82e4ed41b7 k8sPodName=openstack/staffeln-api-546d7f677c-pj7p4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c6c0dac62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-api-546d7f677c-pj7p4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c6c0dac62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-api-546d7f677c-pj7p4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c6c0dac62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=1377 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-api-546d7f677c-pj7p4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c6c0dac62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=1377 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-api-546d7f677c-pj7p4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59702077d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1617 identity=52402 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-conductor-8576c4855d-q8kt2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=59702077d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1617 identity=52402 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-conductor-8576c4855d-q8kt2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.212 e59ce0c3-ae7a-46a3-8b30-c850a0e62740 default }" containerID=c04b2987fdc6d91e2d0371853764c1db5e2d03b5a90b5e560733586527c1acaf datapathConfiguration="&{false false false false false }" interface=lxc270a12684732 k8sPodName=openstack/staffeln-db-init-kvtfr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c04b2987fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-init-kvtfr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c04b2987fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=36a7bec5-aa93-47a1-868b-a17ceb81aaec,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=36a7bec5-aa93-47a1-868b-a17ceb81aaec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-init-kvtfr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=36a7bec5-aa93-47a1-868b-a17ceb81aaec;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=36a7bec5-aa93-47a1-868b-a17ceb81aaec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c04b2987fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identity=51411 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=36a7bec5-aa93-47a1-868b-a17ceb81aaec,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=36a7bec5-aa93-47a1-868b-a17ceb81aaec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-init-kvtfr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c04b2987fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identity=51411 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-init-kvtfr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c6c0dac62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1269 identity=1377 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-api-546d7f677c-pj7p4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c6c0dac62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1269 identity=1377 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-api-546d7f677c-pj7p4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c04b2987fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1501 identity=51411 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-init-kvtfr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c04b2987fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1501 identity=51411 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-init-kvtfr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c04b2987fd endpointID=1501 k8sNamespace=openstack k8sPodName=staffeln-db-init-kvtfr subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=36a7bec5-aa93-47a1-868b-a17ceb81aaec k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=36a7bec5-aa93-47a1-868b-a17ceb81aaec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=c04b2987fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1501 identity=51411 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-init-kvtfr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 3cdd7413-2682-46d9-a09a-2641954d8a6c default }" containerID=2546935f398dec9eac82aee922c9daa0404b7f034b624874117a2c5851fabe84 datapathConfiguration="&{false false false false false }" interface=lxc7037598923f6 k8sPodName=openstack/staffeln-db-sync-vf5mk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2546935f39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3656 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-vf5mk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2546935f39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3656 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=94900ebf-1780-4653-876f-922298d80cbd,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=94900ebf-1780-4653-876f-922298d80cbd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-vf5mk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=94900ebf-1780-4653-876f-922298d80cbd;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=94900ebf-1780-4653-876f-922298d80cbd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2546935f39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3656 identity=35036 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=94900ebf-1780-4653-876f-922298d80cbd,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=94900ebf-1780-4653-876f-922298d80cbd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-vf5mk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2546935f39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3656 identity=35036 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-vf5mk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2546935f39 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3656 identity=35036 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-vf5mk subsys=endpoint level=info msg="Successful endpoint creation" containerID=2546935f39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3656 identity=35036 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-vf5mk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2546935f39 endpointID=3656 k8sNamespace=openstack k8sPodName=staffeln-db-sync-vf5mk subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=94900ebf-1780-4653-876f-922298d80cbd k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=94900ebf-1780-4653-876f-922298d80cbd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=2546935f39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3656 identity=35036 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-vf5mk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 f57c9263-b076-43b4-91af-bd7d4a1596fe default }" containerID=522068fd7a7141a38a8fb03950f13167d2148afcc88a27b44890cb47b4c2230e datapathConfiguration="&{false false false false false }" interface=lxc6be396790d76 k8sPodName=local-path-storage/helper-pod-create-pvc-6b62a9d0-21ab-4ae8-94f8-1d189eb5ea56 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=522068fd7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b62a9d0-21ab-4ae8-94f8-1d189eb5ea56 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=522068fd7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b62a9d0-21ab-4ae8-94f8-1d189eb5ea56 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=522068fd7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 identity=46931 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b62a9d0-21ab-4ae8-94f8-1d189eb5ea56 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=522068fd7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 identity=46931 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b62a9d0-21ab-4ae8-94f8-1d189eb5ea56 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=522068fd7a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1214 identity=46931 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b62a9d0-21ab-4ae8-94f8-1d189eb5ea56 subsys=endpoint level=info msg="Successful endpoint creation" containerID=522068fd7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1214 identity=46931 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b62a9d0-21ab-4ae8-94f8-1d189eb5ea56 subsys=daemon level=info msg="Delete endpoint request" containerID=522068fd7a endpointID=1214 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6b62a9d0-21ab-4ae8-94f8-1d189eb5ea56 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=522068fd7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1214 identity=46931 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b62a9d0-21ab-4ae8-94f8-1d189eb5ea56 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 393a75c0-07d3-42be-b92a-fab6b6120e36 default }" containerID=a53015810e2cc145a451b7581b8c16a7f7c39166ad3b4e770a0c0c20033bbd69 datapathConfiguration="&{false false false false false }" interface=lxcea2c3c3faaba k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a53015810e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a53015810e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a53015810e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a53015810e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 identity=44232 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a53015810e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 identity=44232 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a53015810e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3496 identity=44232 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a53015810e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3496 identity=44232 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 d16d2bb8-323f-48ec-b8da-332b754e2aad default }" containerID=4b78797143e6121a8ba8f2ece785b702447db994241da0d1fcacbcae8a496d5f datapathConfiguration="&{false false false false false }" interface=lxc6f465fc3e9d4 k8sPodName=openstack/cinder-scheduler-5fb95f587-7njsv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b78797143 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-scheduler-5fb95f587-7njsv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b78797143 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-scheduler-5fb95f587-7njsv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4b78797143 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-scheduler-5fb95f587-7njsv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b78797143 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 identity=2763 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-scheduler-5fb95f587-7njsv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b78797143 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 identity=2763 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-scheduler-5fb95f587-7njsv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 146abdf3-e364-4ab9-911a-41f7ae3007eb default }" containerID=312f2b32c4eb480fbc0bd70dcf039ceec93458bffb7be031558631978ae7abc5 datapathConfiguration="&{false false false false false }" interface=lxcbbabd790a168 k8sPodName=openstack/cinder-api-f474f587c-lnvzk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=312f2b32c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2062 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/cinder-api-f474f587c-lnvzk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=312f2b32c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2062 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/cinder-api-f474f587c-lnvzk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=312f2b32c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2062 identity=29935 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/cinder-api-f474f587c-lnvzk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=312f2b32c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2062 identity=29935 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/cinder-api-f474f587c-lnvzk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b78797143 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1731 identity=2763 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-scheduler-5fb95f587-7njsv subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b78797143 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1731 identity=2763 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-scheduler-5fb95f587-7njsv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=312f2b32c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2062 identity=29935 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/cinder-api-f474f587c-lnvzk subsys=endpoint level=info msg="Successful endpoint creation" containerID=312f2b32c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2062 identity=29935 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/cinder-api-f474f587c-lnvzk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.16 7e40ae28-c7b9-4190-941f-72a6f9817e32 default }" containerID=dbbfccecefc16e913f9684633896e9f4f64982f7f7a3a74dbba4877fa4091c3a datapathConfiguration="&{false false false false false }" interface=lxcd3d4f247c8d6 k8sPodName=openstack/cinder-db-init-jtn54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbbfccecef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-db-init-jtn54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbbfccecef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=76fcdb7b-3f13-48e9-8ceb-8d8f5b74340b,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=76fcdb7b-3f13-48e9-8ceb-8d8f5b74340b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-db-init-jtn54 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=76fcdb7b-3f13-48e9-8ceb-8d8f5b74340b;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=76fcdb7b-3f13-48e9-8ceb-8d8f5b74340b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbbfccecef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identity=52727 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=76fcdb7b-3f13-48e9-8ceb-8d8f5b74340b,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=76fcdb7b-3f13-48e9-8ceb-8d8f5b74340b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-db-init-jtn54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbbfccecef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identity=52727 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-db-init-jtn54 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbbfccecef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=37 identity=52727 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-db-init-jtn54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbbfccecef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=37 identity=52727 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-db-init-jtn54 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dbbfccecef endpointID=37 k8sNamespace=openstack k8sPodName=cinder-db-init-jtn54 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=76fcdb7b-3f13-48e9-8ceb-8d8f5b74340b k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=76fcdb7b-3f13-48e9-8ceb-8d8f5b74340b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=dbbfccecef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=37 identity=52727 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-db-init-jtn54 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 0c5dd0f6-508f-474d-8fac-2a1093e3e6f8 default }" containerID=1c0fb324c658837d36a5c8f0200f08445587db8db164053e7561db63f5c77fa2 datapathConfiguration="&{false false false false false }" interface=lxc2127ef8d7f03 k8sPodName=openstack/cinder-db-sync-jcpqd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c0fb324c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-db-sync-jcpqd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c0fb324c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9face8ca-a8dd-46a5-a0b7-c9f810c8c02e,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=9face8ca-a8dd-46a5-a0b7-c9f810c8c02e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-db-sync-jcpqd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9face8ca-a8dd-46a5-a0b7-c9f810c8c02e;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=9face8ca-a8dd-46a5-a0b7-c9f810c8c02e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1c0fb324c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=58813 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9face8ca-a8dd-46a5-a0b7-c9f810c8c02e,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=9face8ca-a8dd-46a5-a0b7-c9f810c8c02e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-db-sync-jcpqd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c0fb324c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=58813 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-db-sync-jcpqd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c0fb324c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=606 identity=58813 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-db-sync-jcpqd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c0fb324c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=58813 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-db-sync-jcpqd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1c0fb324c6 endpointID=606 k8sNamespace=openstack k8sPodName=cinder-db-sync-jcpqd subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9face8ca-a8dd-46a5-a0b7-c9f810c8c02e k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=9face8ca-a8dd-46a5-a0b7-c9f810c8c02e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=1c0fb324c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=58813 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/cinder-db-sync-jcpqd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 f88d0ba6-236d-4042-89e7-c636d48273b9 default }" containerID=24ae35748de395f11f701bf52b5d95dbac30658affef0f5a1546b38f131772df datapathConfiguration="&{false false false false false }" interface=lxc98e535a0e807 k8sPodName=openstack/cinder-rabbit-init-w8stx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24ae35748d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-rabbit-init-w8stx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24ae35748d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=078f0d1f-6038-418d-abb6-f5fa4f7d8026,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=078f0d1f-6038-418d-abb6-f5fa4f7d8026,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-rabbit-init-w8stx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=078f0d1f-6038-418d-abb6-f5fa4f7d8026;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=078f0d1f-6038-418d-abb6-f5fa4f7d8026;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24ae35748d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 identity=10824 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=078f0d1f-6038-418d-abb6-f5fa4f7d8026,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=078f0d1f-6038-418d-abb6-f5fa4f7d8026,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-rabbit-init-w8stx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24ae35748d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 identity=10824 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-rabbit-init-w8stx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24ae35748d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2131 identity=10824 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-rabbit-init-w8stx subsys=endpoint level=info msg="Successful endpoint creation" containerID=24ae35748d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2131 identity=10824 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-rabbit-init-w8stx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=24ae35748d endpointID=2131 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-w8stx subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=078f0d1f-6038-418d-abb6-f5fa4f7d8026 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=078f0d1f-6038-418d-abb6-f5fa4f7d8026 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=24ae35748d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2131 identity=10824 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-rabbit-init-w8stx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 cdf66175-b434-4e30-b041-c2a52c94492d default }" containerID=0bf372a64c106d43bdd49673d1990c67712929eac5355fa0247db9cf5cc92e48 datapathConfiguration="&{false false false false false }" interface=lxcda0daaa244fa k8sPodName=openstack/cinder-ks-service-xv4lg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bf372a64c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-service-xv4lg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bf372a64c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9cc38a36-639b-48b5-b7dc-1565dc3ce62a,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=9cc38a36-639b-48b5-b7dc-1565dc3ce62a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-service-xv4lg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0bf372a64c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-service-xv4lg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9cc38a36-639b-48b5-b7dc-1565dc3ce62a;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=9cc38a36-639b-48b5-b7dc-1565dc3ce62a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bf372a64c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identity=17477 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9cc38a36-639b-48b5-b7dc-1565dc3ce62a,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=9cc38a36-639b-48b5-b7dc-1565dc3ce62a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-service-xv4lg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bf372a64c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identity=17477 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-service-xv4lg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0bf372a64c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3018 identity=17477 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-service-xv4lg subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bf372a64c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3018 identity=17477 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-service-xv4lg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0bf372a64c endpointID=3018 k8sNamespace=openstack k8sPodName=cinder-ks-service-xv4lg subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9cc38a36-639b-48b5-b7dc-1565dc3ce62a k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=9cc38a36-639b-48b5-b7dc-1565dc3ce62a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0bf372a64c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3018 identity=17477 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-service-xv4lg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 69d2c403-9ae5-4638-80ea-539eba6dc2ed default }" containerID=e49f39d02379f3294398670e6e184ecedac806cac676bb6a20867193ff7328d1 datapathConfiguration="&{false false false false false }" interface=lxcce84af481f73 k8sPodName=openstack/cinder-ks-endpoints-8gwns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e49f39d023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3991 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-ks-endpoints-8gwns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e49f39d023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3991 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=4466aa12-4afd-4047-b937-f15fbbd80c4f,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4466aa12-4afd-4047-b937-f15fbbd80c4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-ks-endpoints-8gwns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=4466aa12-4afd-4047-b937-f15fbbd80c4f;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=4466aa12-4afd-4047-b937-f15fbbd80c4f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e49f39d023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3991 identity=39636 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=4466aa12-4afd-4047-b937-f15fbbd80c4f,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4466aa12-4afd-4047-b937-f15fbbd80c4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-ks-endpoints-8gwns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e49f39d023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3991 identity=39636 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-ks-endpoints-8gwns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e49f39d023 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3991 identity=39636 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-ks-endpoints-8gwns subsys=endpoint level=info msg="Successful endpoint creation" containerID=e49f39d023 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3991 identity=39636 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-ks-endpoints-8gwns subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e49f39d023 endpointID=3991 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-8gwns subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=4466aa12-4afd-4047-b937-f15fbbd80c4f k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=4466aa12-4afd-4047-b937-f15fbbd80c4f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e49f39d023 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3991 identity=39636 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-ks-endpoints-8gwns subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 ed4d8bbe-95fc-41e2-897d-76345b9b6d01 default }" containerID=8cb51bedaecfacefac2ddbaf4982a31681d80475f7213859af51cd33e38659dd datapathConfiguration="&{false false false false false }" interface=lxc885c07837520 k8sPodName=openstack/cinder-ks-user-4qzxb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cb51bedae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2282 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-ks-user-4qzxb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cb51bedae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2282 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=366f7062-4bac-487d-804a-aa05256fde05,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=366f7062-4bac-487d-804a-aa05256fde05,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-ks-user-4qzxb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=366f7062-4bac-487d-804a-aa05256fde05;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=366f7062-4bac-487d-804a-aa05256fde05;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8cb51bedae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2282 identity=6262 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=366f7062-4bac-487d-804a-aa05256fde05,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=366f7062-4bac-487d-804a-aa05256fde05,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-ks-user-4qzxb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cb51bedae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2282 identity=6262 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-ks-user-4qzxb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8cb51bedae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2282 identity=6262 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-ks-user-4qzxb subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cb51bedae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2282 identity=6262 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-ks-user-4qzxb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8cb51bedae endpointID=2282 k8sNamespace=openstack k8sPodName=cinder-ks-user-4qzxb subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=366f7062-4bac-487d-804a-aa05256fde05 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=366f7062-4bac-487d-804a-aa05256fde05 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8cb51bedae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2282 identity=6262 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-ks-user-4qzxb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 5f3346ad-6f1c-446c-a0bd-3202b2f97b2a default }" containerID=53223dbe36cc4d76a80ee2eb6d426327352a7ca574e02f15ef068ee29d1720bb datapathConfiguration="&{false false false false false }" interface=lxc0f813813ce50 k8sPodName=openstack/cinder-backup-storage-init-f5b9h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53223dbe36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-backup-storage-init-f5b9h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53223dbe36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=870fcc65-f9c0-477b-86e8-c104bf3e0055,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=870fcc65-f9c0-477b-86e8-c104bf3e0055,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-backup-storage-init-f5b9h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=870fcc65-f9c0-477b-86e8-c104bf3e0055;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=870fcc65-f9c0-477b-86e8-c104bf3e0055;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=53223dbe36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identity=28027 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=870fcc65-f9c0-477b-86e8-c104bf3e0055,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=870fcc65-f9c0-477b-86e8-c104bf3e0055,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-backup-storage-init-f5b9h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53223dbe36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identity=28027 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-backup-storage-init-f5b9h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53223dbe36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2090 identity=28027 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-backup-storage-init-f5b9h subsys=endpoint level=info msg="Successful endpoint creation" containerID=53223dbe36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2090 identity=28027 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-backup-storage-init-f5b9h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=53223dbe36 endpointID=2090 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-f5b9h subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=870fcc65-f9c0-477b-86e8-c104bf3e0055 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=870fcc65-f9c0-477b-86e8-c104bf3e0055 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=53223dbe36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2090 identity=28027 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-backup-storage-init-f5b9h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 121f3df7-524a-4f2c-973c-34261460d0b5 default }" containerID=59f149b8e124295fdb198980fa1f4e40a8fdabd754015487c8c9f6c1714eb953 datapathConfiguration="&{false false false false false }" interface=lxc1f60687f2ce3 k8sPodName=openstack/cinder-create-internal-tenant-pqj2n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59f149b8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-pqj2n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59f149b8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=69f426a0-1d32-438c-af39-4d152d3b346e,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=69f426a0-1d32-438c-af39-4d152d3b346e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-pqj2n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=69f426a0-1d32-438c-af39-4d152d3b346e;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=69f426a0-1d32-438c-af39-4d152d3b346e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59f149b8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=582 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=69f426a0-1d32-438c-af39-4d152d3b346e,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=69f426a0-1d32-438c-af39-4d152d3b346e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-pqj2n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59f149b8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=582 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-pqj2n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59f149b8e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=77 identity=582 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-pqj2n subsys=endpoint level=info msg="Successful endpoint creation" containerID=59f149b8e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=77 identity=582 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-pqj2n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=59f149b8e1 endpointID=77 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-pqj2n subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=69f426a0-1d32-438c-af39-4d152d3b346e k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=69f426a0-1d32-438c-af39-4d152d3b346e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=59f149b8e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=77 identity=582 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-pqj2n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 d0048766-dd91-4491-819c-0c6d34c5dab1 default }" containerID=10880deeb7f16bb1024b9310b543a972a8b6ad002f55369cc54c7ff12d594d9a datapathConfiguration="&{false false false false false }" interface=lxc2514497d31c6 k8sPodName=openstack/cinder-storage-init-tdsxg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10880deeb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-storage-init-tdsxg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10880deeb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9d86f693-d1e5-4db9-aeb8-10ca6c7e4d23,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=9d86f693-d1e5-4db9-aeb8-10ca6c7e4d23,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-storage-init-tdsxg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=10880deeb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-storage-init-tdsxg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9d86f693-d1e5-4db9-aeb8-10ca6c7e4d23;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=9d86f693-d1e5-4db9-aeb8-10ca6c7e4d23;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10880deeb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=17283 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9d86f693-d1e5-4db9-aeb8-10ca6c7e4d23,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=9d86f693-d1e5-4db9-aeb8-10ca6c7e4d23,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-storage-init-tdsxg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10880deeb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=17283 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-storage-init-tdsxg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10880deeb7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=154 identity=17283 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-storage-init-tdsxg subsys=endpoint level=info msg="Successful endpoint creation" containerID=10880deeb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=154 identity=17283 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-storage-init-tdsxg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=10880deeb7 endpointID=154 k8sNamespace=openstack k8sPodName=cinder-storage-init-tdsxg subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9d86f693-d1e5-4db9-aeb8-10ca6c7e4d23 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=9d86f693-d1e5-4db9-aeb8-10ca6c7e4d23 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=10880deeb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=154 identity=17283 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-storage-init-tdsxg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 3cb26da7-bb67-450f-b382-810f5bc8d911 default }" containerID=b4eec0f8e40e12d7ddd9fa8fa1c8deb8368feb3aef59fc5cb82f63070a6ac658 datapathConfiguration="&{false false false false false }" interface=lxcf482a7d44298 k8sPodName=openstack/cinder-bootstrap-d2xrm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4eec0f8e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-bootstrap-d2xrm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4eec0f8e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=687844eb-492e-4fd7-9e66-f3c9e4205262,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=687844eb-492e-4fd7-9e66-f3c9e4205262,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-bootstrap-d2xrm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=687844eb-492e-4fd7-9e66-f3c9e4205262;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=687844eb-492e-4fd7-9e66-f3c9e4205262;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4eec0f8e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 identity=26645 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=687844eb-492e-4fd7-9e66-f3c9e4205262,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=687844eb-492e-4fd7-9e66-f3c9e4205262,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-bootstrap-d2xrm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b4eec0f8e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2510 identity=26645 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-bootstrap-d2xrm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4eec0f8e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2510 identity=26645 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-bootstrap-d2xrm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4eec0f8e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2510 identity=26645 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-bootstrap-d2xrm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.9 9b64193b-6786-4c0e-b039-5487efdab46d default }" containerID=386a1a37eaec8722494891c6b2da63bdfba30ee89d4f944df4ae0c1bf81db156 datapathConfiguration="&{false false false false false }" interface=lxc9c55d927a8f8 k8sPodName=openstack/cinder-volume-7655b64987-2n2cb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=386a1a37ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3766 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-volume-7655b64987-2n2cb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=386a1a37ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3766 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-volume-7655b64987-2n2cb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=386a1a37ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3766 identity=30415 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-volume-7655b64987-2n2cb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=386a1a37ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3766 identity=30415 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-volume-7655b64987-2n2cb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 02960a8a-7ebf-4caf-861c-163e4784f876 default }" containerID=5a99b908e156bd9fe0ae0fd70ce3c37ec0e8f74c8430c58d4aeba74558505254 datapathConfiguration="&{false false false false false }" interface=lxce280add7e171 k8sPodName=openstack/cinder-backup-578ff8675-2rbck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a99b908e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4012 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-578ff8675-2rbck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a99b908e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4012 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-578ff8675-2rbck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a99b908e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4012 identity=58042 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-578ff8675-2rbck oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a99b908e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4012 identity=58042 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-578ff8675-2rbck subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=386a1a37ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3766 identity=30415 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-volume-7655b64987-2n2cb subsys=endpoint level=info msg="Successful endpoint creation" containerID=386a1a37ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3766 identity=30415 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-volume-7655b64987-2n2cb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5a99b908e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4012 identity=58042 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-578ff8675-2rbck subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a99b908e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4012 identity=58042 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-578ff8675-2rbck subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4eec0f8e4 endpointID=2510 k8sNamespace=openstack k8sPodName=cinder-bootstrap-d2xrm subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=687844eb-492e-4fd7-9e66-f3c9e4205262 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=687844eb-492e-4fd7-9e66-f3c9e4205262 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=b4eec0f8e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2510 identity=26645 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/cinder-bootstrap-d2xrm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 f621e7cc-9e89-4b33-9444-c2fec0c43ec5 default }" containerID=af3e9e3e8f6ab7f8bafa605ec61002aa5e30121fb6aeab053d17768353483c9b datapathConfiguration="&{false false false false false }" interface=lxc3bfdf05424d1 k8sPodName=openstack/placement-api-775cd77d6c-gn2f4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af3e9e3e8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/placement-api-775cd77d6c-gn2f4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af3e9e3e8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/placement-api-775cd77d6c-gn2f4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af3e9e3e8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=45644 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/placement-api-775cd77d6c-gn2f4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=af3e9e3e8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=45644 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/placement-api-775cd77d6c-gn2f4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 e95d8048-3bbf-43a5-8e2b-3ac3bf051979 default }" containerID=c39a28bfa0cdf1ff59198dcd7db435c742a5ceb41cad4fc8e057b04c2670a1d5 datapathConfiguration="&{false false false false false }" interface=lxc23abcca287c7 k8sPodName=openstack/placement-db-init-6qv54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c39a28bfa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/placement-db-init-6qv54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c39a28bfa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=16c8b9a8-c555-4267-91d2-357dc8bb36d9,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=16c8b9a8-c555-4267-91d2-357dc8bb36d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/placement-db-init-6qv54 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=16c8b9a8-c555-4267-91d2-357dc8bb36d9;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=16c8b9a8-c555-4267-91d2-357dc8bb36d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c39a28bfa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identity=52662 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=16c8b9a8-c555-4267-91d2-357dc8bb36d9,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=16c8b9a8-c555-4267-91d2-357dc8bb36d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/placement-db-init-6qv54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c39a28bfa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identity=52662 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/placement-db-init-6qv54 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af3e9e3e8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=216 identity=45644 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/placement-api-775cd77d6c-gn2f4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af3e9e3e8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=216 identity=45644 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/placement-api-775cd77d6c-gn2f4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c39a28bfa0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=83 identity=52662 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/placement-db-init-6qv54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c39a28bfa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=83 identity=52662 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/placement-db-init-6qv54 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c39a28bfa0 endpointID=83 k8sNamespace=openstack k8sPodName=placement-db-init-6qv54 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=16c8b9a8-c555-4267-91d2-357dc8bb36d9 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=16c8b9a8-c555-4267-91d2-357dc8bb36d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=c39a28bfa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=83 identity=52662 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/placement-db-init-6qv54 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 aad2b732-e451-412f-ac67-3057b31f3b85 default }" containerID=2654ebaa9e77126d43ce20eb4a1ff27fd3acf0dc263c0977fa00a7a240f4373f datapathConfiguration="&{false false false false false }" interface=lxc1b6a5a08b3c0 k8sPodName=openstack/placement-db-sync-5tsnz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2654ebaa9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-db-sync-5tsnz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2654ebaa9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=78a34f7b-f2c7-488e-98be-29fe95b8b623,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=78a34f7b-f2c7-488e-98be-29fe95b8b623,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-db-sync-5tsnz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=78a34f7b-f2c7-488e-98be-29fe95b8b623;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=78a34f7b-f2c7-488e-98be-29fe95b8b623;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2654ebaa9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identity=38512 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=78a34f7b-f2c7-488e-98be-29fe95b8b623,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=78a34f7b-f2c7-488e-98be-29fe95b8b623,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-db-sync-5tsnz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2654ebaa9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identity=38512 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-db-sync-5tsnz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2654ebaa9e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3099 identity=38512 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-db-sync-5tsnz subsys=endpoint level=info msg="Successful endpoint creation" containerID=2654ebaa9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3099 identity=38512 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-db-sync-5tsnz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2654ebaa9e endpointID=3099 k8sNamespace=openstack k8sPodName=placement-db-sync-5tsnz subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=78a34f7b-f2c7-488e-98be-29fe95b8b623 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=78a34f7b-f2c7-488e-98be-29fe95b8b623 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=2654ebaa9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3099 identity=38512 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-db-sync-5tsnz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 8fd0a867-cf21-41fc-b508-b641e43e2d96 default }" containerID=a365ab7de1209aefe90bedae630e85f85f7be788797fb9a63b298b3e2bb023bb datapathConfiguration="&{false false false false false }" interface=lxc8389eb6b5c0f k8sPodName=openstack/placement-ks-service-npz9w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a365ab7de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-ks-service-npz9w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a365ab7de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d5cb432c-28c1-45b3-be3d-06669eaf7d24,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=d5cb432c-28c1-45b3-be3d-06669eaf7d24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-ks-service-npz9w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=d5cb432c-28c1-45b3-be3d-06669eaf7d24;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=d5cb432c-28c1-45b3-be3d-06669eaf7d24;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a365ab7de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identity=50289 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d5cb432c-28c1-45b3-be3d-06669eaf7d24,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=d5cb432c-28c1-45b3-be3d-06669eaf7d24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-ks-service-npz9w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a365ab7de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identity=50289 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-ks-service-npz9w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a365ab7de1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2199 identity=50289 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-ks-service-npz9w subsys=endpoint level=info msg="Successful endpoint creation" containerID=a365ab7de1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2199 identity=50289 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-ks-service-npz9w subsys=daemon level=info msg="Delete endpoint request" containerID=a365ab7de1 endpointID=2199 k8sNamespace=openstack k8sPodName=placement-ks-service-npz9w subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=d5cb432c-28c1-45b3-be3d-06669eaf7d24 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=d5cb432c-28c1-45b3-be3d-06669eaf7d24 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=a365ab7de1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2199 identity=50289 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-ks-service-npz9w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 a1c8d380-a045-4fd3-ac9b-efa49e5dd111 default }" containerID=fe4d46cd28f5f85dfc4aa9940d11f8f877ec7120151039844fd301b08893e0f5 datapathConfiguration="&{false false false false false }" interface=lxcec986b414be6 k8sPodName=openstack/placement-ks-user-p6m6n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe4d46cd28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/placement-ks-user-p6m6n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe4d46cd28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=8d03cf37-ff81-4140-b6c8-22327e5f58d6,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=8d03cf37-ff81-4140-b6c8-22327e5f58d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/placement-ks-user-p6m6n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=8d03cf37-ff81-4140-b6c8-22327e5f58d6;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=8d03cf37-ff81-4140-b6c8-22327e5f58d6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe4d46cd28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identity=391 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=8d03cf37-ff81-4140-b6c8-22327e5f58d6,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=8d03cf37-ff81-4140-b6c8-22327e5f58d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/placement-ks-user-p6m6n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe4d46cd28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identity=391 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/placement-ks-user-p6m6n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe4d46cd28 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=993 identity=391 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/placement-ks-user-p6m6n subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe4d46cd28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=993 identity=391 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/placement-ks-user-p6m6n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe4d46cd28 endpointID=993 k8sNamespace=openstack k8sPodName=placement-ks-user-p6m6n subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=8d03cf37-ff81-4140-b6c8-22327e5f58d6 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=8d03cf37-ff81-4140-b6c8-22327e5f58d6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=fe4d46cd28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=993 identity=391 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/placement-ks-user-p6m6n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 8a2a4c62-b60c-4ded-b84f-15296020aa2b default }" containerID=b780373a04bf796998dc91d58ba90a0a4b5b92e9ca174e4ed608d833a495a0da datapathConfiguration="&{false false false false false }" interface=lxc99f42fe9e2e9 k8sPodName=openstack/placement-ks-endpoints-4q88r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b780373a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/placement-ks-endpoints-4q88r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b780373a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=bc969b94-de5e-4f45-9dd1-07963d7c3995,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bc969b94-de5e-4f45-9dd1-07963d7c3995,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/placement-ks-endpoints-4q88r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b780373a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=openstack/placement-ks-endpoints-4q88r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=bc969b94-de5e-4f45-9dd1-07963d7c3995;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=bc969b94-de5e-4f45-9dd1-07963d7c3995;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b780373a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identity=983 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=bc969b94-de5e-4f45-9dd1-07963d7c3995,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bc969b94-de5e-4f45-9dd1-07963d7c3995,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/placement-ks-endpoints-4q88r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b780373a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identity=983 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/placement-ks-endpoints-4q88r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b780373a04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1478 identity=983 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/placement-ks-endpoints-4q88r subsys=endpoint level=info msg="Successful endpoint creation" containerID=b780373a04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1478 identity=983 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/placement-ks-endpoints-4q88r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b780373a04 endpointID=1478 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-4q88r subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=bc969b94-de5e-4f45-9dd1-07963d7c3995 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=bc969b94-de5e-4f45-9dd1-07963d7c3995 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=b780373a04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1478 identity=983 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/placement-ks-endpoints-4q88r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 141065df-c312-420a-8f95-15d9f3d8c7c9 default }" containerID=8e6ed6049748c7bc91beec1fd622328a8f0664cbbbfada23e29b8dc850a9ea04 datapathConfiguration="&{false false false false false }" interface=lxca4c2e16bcc9e k8sPodName=openstack/cinder-volume-usage-audit-29673965-l8thx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e6ed60497 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=618 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29673965-l8thx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e6ed60497 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=618 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8bfd7d3d-8cfd-4044-88f9-6ebb4b63255a,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29673965,k8s:component=volume-usage-audit,k8s:controller-uid=8bfd7d3d-8cfd-4044-88f9-6ebb4b63255a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29673965,k8s:release_group=cinder" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29673965-l8thx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8bfd7d3d-8cfd-4044-88f9-6ebb4b63255a;k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29673965;k8s:component=volume-usage-audit;k8s:controller-uid=8bfd7d3d-8cfd-4044-88f9-6ebb4b63255a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-volume-usage-audit-29673965;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e6ed60497 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=618 identity=31555 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8bfd7d3d-8cfd-4044-88f9-6ebb4b63255a,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29673965,k8s:component=volume-usage-audit,k8s:controller-uid=8bfd7d3d-8cfd-4044-88f9-6ebb4b63255a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29673965,k8s:release_group=cinder" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29673965-l8thx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e6ed60497 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=618 identity=31555 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29673965-l8thx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8e6ed60497 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=618 identity=31555 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29673965-l8thx subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e6ed60497 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=618 identity=31555 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29673965-l8thx subsys=daemon level=info msg="Delete endpoint request" containerID=8e6ed60497 endpointID=618 k8sNamespace=openstack k8sPodName=cinder-volume-usage-audit-29673965-l8thx subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8bfd7d3d-8cfd-4044-88f9-6ebb4b63255a k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29673965 k8s:component=volume-usage-audit k8s:controller-uid=8bfd7d3d-8cfd-4044-88f9-6ebb4b63255a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-volume-usage-audit-29673965 k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8e6ed60497 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=618 identity=31555 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29673965-l8thx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 6f361a52-7b62-468b-b4e2-c75d20c3311e default }" containerID=fa21d146c3ac34882bffc70c1ff73b72341b86b2b958ac0c8adfe15a7071dd96 datapathConfiguration="&{false false false false false }" interface=lxc49e753511b38 k8sPodName=openstack/neutron-coredns-7dd4958666-pfcd5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa21d146c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1485 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-pfcd5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa21d146c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1485 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-pfcd5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa21d146c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1485 identity=9178 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-pfcd5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa21d146c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1485 identity=9178 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-pfcd5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa21d146c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1485 identity=9178 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-pfcd5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa21d146c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1485 identity=9178 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-pfcd5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.250 52e3654e-f1ba-4ec5-93a8-9688342834b6 default }" containerID=7646d4090eea0ebd20e5e55b6961bfec219ff36b5bf7c380c1ec8806002eb485 datapathConfiguration="&{false false false false false }" interface=lxc88e09ccb93e0 k8sPodName=local-path-storage/helper-pod-create-pvc-e8346129-ccf6-41c1-81d6-ebb553839ff1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7646d4090e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8346129-ccf6-41c1-81d6-ebb553839ff1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7646d4090e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8346129-ccf6-41c1-81d6-ebb553839ff1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7646d4090e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identity=46931 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8346129-ccf6-41c1-81d6-ebb553839ff1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7646d4090e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identity=46931 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8346129-ccf6-41c1-81d6-ebb553839ff1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7646d4090e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2020 identity=46931 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8346129-ccf6-41c1-81d6-ebb553839ff1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7646d4090e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2020 identity=46931 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8346129-ccf6-41c1-81d6-ebb553839ff1 subsys=daemon level=info msg="Delete endpoint request" containerID=7646d4090e endpointID=2020 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e8346129-ccf6-41c1-81d6-ebb553839ff1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7646d4090e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2020 identity=46931 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8346129-ccf6-41c1-81d6-ebb553839ff1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 0187c761-4e15-4502-969d-8bd1419a71b0 default }" containerID=2dd0c2522ad99b7416056acb4b245c82cb12025710be85999c2da565503fd8ad datapathConfiguration="&{false false false false false }" interface=lxc3b919a211b68 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dd0c2522a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1191 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dd0c2522a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1191 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dd0c2522a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1191 identity=21187 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2dd0c2522a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1191 identity=21187 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2dd0c2522a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1191 identity=21187 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dd0c2522a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1191 identity=21187 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.29 f66065e0-2628-49cd-901e-4f1490d01576 default }" containerID=f3da4fc34fcceaaa5600786b889cea5c2f353560f7c5edd7298f93424eeacefe datapathConfiguration="&{false false false false false }" interface=lxcf05b8ce0ef11 k8sPodName=openstack/nova-conductor-7cb79db7b8-8hjn4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3da4fc34f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-conductor-7cb79db7b8-8hjn4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3da4fc34f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-conductor-7cb79db7b8-8hjn4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3da4fc34f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identity=2073 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-conductor-7cb79db7b8-8hjn4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3da4fc34f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identity=2073 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-conductor-7cb79db7b8-8hjn4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 61e5868b-1b65-41da-a85b-b7e4b8b4b28e default }" containerID=f69c0bce91579a1a5cf9942390b8ca0c28163ba5a4f20ee2ae694a92c80c5acd datapathConfiguration="&{false false false false false }" interface=lxc60895712e1b0 k8sPodName=openstack/nova-api-metadata-785b6c9746-74q4f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f69c0bce91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-api-metadata-785b6c9746-74q4f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f69c0bce91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-api-metadata-785b6c9746-74q4f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f69c0bce91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 identity=6071 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-api-metadata-785b6c9746-74q4f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f69c0bce91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 identity=6071 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-api-metadata-785b6c9746-74q4f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 f0a42e96-b8ea-4cb2-86a2-b70e54bd4770 default }" containerID=5557e9f3c3b3cb8b079ad05b5466553a3062cb80aedb29cbf90454c7ecf05910 datapathConfiguration="&{false false false false false }" interface=lxc567356e8ba2b k8sPodName=openstack/nova-api-osapi-6b77c85b8d-rd7rk labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.145 06444bd8-c0ad-45f1-9ce9-22a57fbc295b default }" containerID=de53d73ae3ccc600625628ab22b0fdc958b31cb6a799fee0ab6332ba7399434d datapathConfiguration="&{false false false false false }" interface=lxc64d66017b6f0 k8sPodName=openstack/nova-scheduler-85fd9bdcc6-lczvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5557e9f3c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/nova-api-osapi-6b77c85b8d-rd7rk subsys=endpoint level=info msg="New endpoint" containerID=de53d73ae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1487 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/nova-scheduler-85fd9bdcc6-lczvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5557e9f3c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/nova-api-osapi-6b77c85b8d-rd7rk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=de53d73ae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1487 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/nova-scheduler-85fd9bdcc6-lczvr subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5557e9f3c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 identity=16060 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/nova-api-osapi-6b77c85b8d-rd7rk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5557e9f3c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 identity=16060 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/nova-api-osapi-6b77c85b8d-rd7rk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de53d73ae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1487 identity=15407 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/nova-scheduler-85fd9bdcc6-lczvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de53d73ae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1487 identity=15407 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/nova-scheduler-85fd9bdcc6-lczvr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3da4fc34f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2044 identity=2073 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-conductor-7cb79db7b8-8hjn4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3da4fc34f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2044 identity=2073 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-conductor-7cb79db7b8-8hjn4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.18 02a15009-2501-4ca7-8794-51537953d69e default }" containerID=84d8d63e405371b47ba7808f726256f10bf84858b4869b816cc3813c0e350571 datapathConfiguration="&{false false false false false }" interface=lxceb619ffce6bb k8sPodName=openstack/nova-db-init-wfz8r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84d8d63e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-db-init-wfz8r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84d8d63e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=836eded1-6c57-48c7-bfbd-d90fe2aaf1ee,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=836eded1-6c57-48c7-bfbd-d90fe2aaf1ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-db-init-wfz8r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=f69c0bce91 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2131 identity=6071 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-api-metadata-785b6c9746-74q4f subsys=endpoint level=info msg="Successful endpoint creation" containerID=f69c0bce91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2131 identity=6071 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-api-metadata-785b6c9746-74q4f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.171 6dfba0de-1c1f-471a-8dff-08ab306e80f0 default }" containerID=1ada6993b73c6728eb599ce4ae5ba9b582d14fb42c6f600e857e61278b66821e datapathConfiguration="&{false false false false false }" interface=lxc66a1ee829406 k8sPodName=openstack/nova-cell-setup-sbjf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ada6993b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/nova-cell-setup-sbjf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ada6993b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a2a571f4-bfe4-4597-bce2-ced11f32dd5f,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=a2a571f4-bfe4-4597-bce2-ced11f32dd5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/nova-cell-setup-sbjf4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 060eabf8-54ac-4fbe-8747-75e1aa67ed06 default }" containerID=1de0cc9a2b1e0e394a849fd8f41bda9f2d76f3cd3f7c5d7625c012dffc8450a8 datapathConfiguration="&{false false false false false }" interface=lxc538915498fa3 k8sPodName=openstack/nova-bootstrap-cmvl2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1de0cc9a2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/nova-bootstrap-cmvl2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1de0cc9a2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9d9a8fe0-e75e-4946-a489-da85314b2197,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=9d9a8fe0-e75e-4946-a489-da85314b2197,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/nova-bootstrap-cmvl2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=836eded1-6c57-48c7-bfbd-d90fe2aaf1ee;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=836eded1-6c57-48c7-bfbd-d90fe2aaf1ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84d8d63e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=13283 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=836eded1-6c57-48c7-bfbd-d90fe2aaf1ee,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=836eded1-6c57-48c7-bfbd-d90fe2aaf1ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-db-init-wfz8r oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=84d8d63e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=13283 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-db-init-wfz8r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de53d73ae3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1487 identity=15407 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/nova-scheduler-85fd9bdcc6-lczvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=de53d73ae3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1487 identity=15407 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/nova-scheduler-85fd9bdcc6-lczvr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5557e9f3c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3181 identity=16060 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/nova-api-osapi-6b77c85b8d-rd7rk subsys=endpoint level=info msg="Successful endpoint creation" containerID=5557e9f3c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3181 identity=16060 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/nova-api-osapi-6b77c85b8d-rd7rk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=84d8d63e40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=663 identity=13283 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-db-init-wfz8r subsys=endpoint level=info msg="Successful endpoint creation" containerID=84d8d63e40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=13283 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-db-init-wfz8r subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=a2a571f4-bfe4-4597-bce2-ced11f32dd5f;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=a2a571f4-bfe4-4597-bce2-ced11f32dd5f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1de0cc9a2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/nova-bootstrap-cmvl2 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=1ada6993b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.171 ipv6= k8sPodName=openstack/nova-cell-setup-sbjf4 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1ada6993b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 identity=18596 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a2a571f4-bfe4-4597-bce2-ced11f32dd5f,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=a2a571f4-bfe4-4597-bce2-ced11f32dd5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/nova-cell-setup-sbjf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ada6993b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 identity=18596 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/nova-cell-setup-sbjf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=1ada6993b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2154 identity=18596 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/nova-cell-setup-sbjf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ada6993b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2154 identity=18596 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/nova-cell-setup-sbjf4 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=9d9a8fe0-e75e-4946-a489-da85314b2197;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=9d9a8fe0-e75e-4946-a489-da85314b2197;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1de0cc9a2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identity=35806 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9d9a8fe0-e75e-4946-a489-da85314b2197,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=9d9a8fe0-e75e-4946-a489-da85314b2197,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/nova-bootstrap-cmvl2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1de0cc9a2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identity=35806 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/nova-bootstrap-cmvl2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1de0cc9a2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=668 identity=35806 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/nova-bootstrap-cmvl2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1de0cc9a2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=668 identity=35806 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/nova-bootstrap-cmvl2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.80 fb3e763c-7701-4732-8b8e-3fd29d0ace2a default }" containerID=f6961bead94dddb1b254befe27a0f418a2e8bc0286089df9a4236989222f6ce2 datapathConfiguration="&{false false false false false }" interface=lxc4c9f1cb27362 k8sPodName=openstack/nova-novncproxy-7988765c87-qmxcd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6961bead9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/nova-novncproxy-7988765c87-qmxcd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6961bead9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/nova-novncproxy-7988765c87-qmxcd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6961bead9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identity=46519 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/nova-novncproxy-7988765c87-qmxcd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6961bead9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identity=46519 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/nova-novncproxy-7988765c87-qmxcd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6961bead9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=676 identity=46519 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/nova-novncproxy-7988765c87-qmxcd subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6961bead9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=676 identity=46519 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/nova-novncproxy-7988765c87-qmxcd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=84d8d63e40 endpointID=663 k8sNamespace=openstack k8sPodName=nova-db-init-wfz8r subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=836eded1-6c57-48c7-bfbd-d90fe2aaf1ee k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=836eded1-6c57-48c7-bfbd-d90fe2aaf1ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=84d8d63e40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=13283 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-db-init-wfz8r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 a061248c-aad3-45df-8038-1a5f340a6183 default }" containerID=72beb8db28e2ede0d4c465e73dc0867e6b8f0460d6cc1355593e63e6f44fc68c datapathConfiguration="&{false false false false false }" interface=lxcb6d50e872b0e k8sPodName=openstack/nova-db-sync-vkh8f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72beb8db28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2368 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/nova-db-sync-vkh8f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72beb8db28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2368 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9ca2a1dc-48f7-454e-9e64-a0aee2e84fa1,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=9ca2a1dc-48f7-454e-9e64-a0aee2e84fa1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/nova-db-sync-vkh8f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=9ca2a1dc-48f7-454e-9e64-a0aee2e84fa1;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=9ca2a1dc-48f7-454e-9e64-a0aee2e84fa1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72beb8db28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2368 identity=13411 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9ca2a1dc-48f7-454e-9e64-a0aee2e84fa1,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=9ca2a1dc-48f7-454e-9e64-a0aee2e84fa1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/nova-db-sync-vkh8f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72beb8db28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2368 identity=13411 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/nova-db-sync-vkh8f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=72beb8db28 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2368 identity=13411 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/nova-db-sync-vkh8f subsys=endpoint level=info msg="Successful endpoint creation" containerID=72beb8db28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2368 identity=13411 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/nova-db-sync-vkh8f subsys=daemon level=info msg="Delete endpoint request" containerID=72beb8db28 endpointID=2368 k8sNamespace=openstack k8sPodName=nova-db-sync-vkh8f subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=9ca2a1dc-48f7-454e-9e64-a0aee2e84fa1 k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=9ca2a1dc-48f7-454e-9e64-a0aee2e84fa1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=72beb8db28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2368 identity=13411 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/nova-db-sync-vkh8f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 a1452f2f-2f04-43e5-aaf4-144c2fe8401a default }" containerID=fe723b08de4b8c27705991bdd9d55ac1aeab443c5b3dcc3481a21a0d69b0c46d datapathConfiguration="&{false false false false false }" interface=lxc1b8d462ebfe6 k8sPodName=openstack/nova-rabbit-init-dqpxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe723b08de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-rabbit-init-dqpxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe723b08de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d00301be-2176-4873-bc47-0b7e92b9e0b5,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d00301be-2176-4873-bc47-0b7e92b9e0b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-rabbit-init-dqpxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=d00301be-2176-4873-bc47-0b7e92b9e0b5;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d00301be-2176-4873-bc47-0b7e92b9e0b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=fe723b08de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-rabbit-init-dqpxz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fe723b08de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identity=56769 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d00301be-2176-4873-bc47-0b7e92b9e0b5,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d00301be-2176-4873-bc47-0b7e92b9e0b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-rabbit-init-dqpxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe723b08de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identity=56769 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-rabbit-init-dqpxz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe723b08de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1213 identity=56769 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-rabbit-init-dqpxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe723b08de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1213 identity=56769 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-rabbit-init-dqpxz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe723b08de endpointID=1213 k8sNamespace=openstack k8sPodName=nova-rabbit-init-dqpxz subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=d00301be-2176-4873-bc47-0b7e92b9e0b5 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d00301be-2176-4873-bc47-0b7e92b9e0b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=fe723b08de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1213 identity=56769 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-rabbit-init-dqpxz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 fcd65a0b-d559-4718-ad00-6d30da2202b6 default }" containerID=c96388a0c251cc6db399709d3fcd0a868878a62eb052354dc4c06e3541a5fa74 datapathConfiguration="&{false false false false false }" interface=lxce085a68fe769 k8sPodName=openstack/nova-ks-service-vmb2r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c96388a0c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/nova-ks-service-vmb2r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c96388a0c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=74a1c9d1-1e93-4e3c-ab5b-5b6ba4dd4090,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=74a1c9d1-1e93-4e3c-ab5b-5b6ba4dd4090,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/nova-ks-service-vmb2r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=74a1c9d1-1e93-4e3c-ab5b-5b6ba4dd4090;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=74a1c9d1-1e93-4e3c-ab5b-5b6ba4dd4090;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c96388a0c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identity=37884 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=74a1c9d1-1e93-4e3c-ab5b-5b6ba4dd4090,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=74a1c9d1-1e93-4e3c-ab5b-5b6ba4dd4090,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/nova-ks-service-vmb2r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c96388a0c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identity=37884 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/nova-ks-service-vmb2r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c96388a0c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=987 identity=37884 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/nova-ks-service-vmb2r subsys=endpoint level=info msg="Successful endpoint creation" containerID=c96388a0c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=987 identity=37884 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/nova-ks-service-vmb2r subsys=daemon level=info msg="Delete endpoint request" containerID=c96388a0c2 endpointID=987 k8sNamespace=openstack k8sPodName=nova-ks-service-vmb2r subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=74a1c9d1-1e93-4e3c-ab5b-5b6ba4dd4090 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=74a1c9d1-1e93-4e3c-ab5b-5b6ba4dd4090 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=c96388a0c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=987 identity=37884 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/nova-ks-service-vmb2r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 5d37fe50-f562-417c-a444-efe75bbf14b8 default }" containerID=92dd80da1fb1a9ec4e22f35d9a70ef7cd4f4e8a748d166a728e69afbe735dd9f datapathConfiguration="&{false false false false false }" interface=lxcfcdb4aa4e45e k8sPodName=openstack/nova-ks-endpoints-7pfhw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92dd80da1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-ks-endpoints-7pfhw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92dd80da1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=de631448-d616-4ad4-83dc-939ed403d9f6,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=de631448-d616-4ad4-83dc-939ed403d9f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-ks-endpoints-7pfhw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=de631448-d616-4ad4-83dc-939ed403d9f6;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=de631448-d616-4ad4-83dc-939ed403d9f6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92dd80da1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=11504 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=de631448-d616-4ad4-83dc-939ed403d9f6,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=de631448-d616-4ad4-83dc-939ed403d9f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-ks-endpoints-7pfhw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92dd80da1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=11504 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-ks-endpoints-7pfhw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92dd80da1f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=824 identity=11504 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-ks-endpoints-7pfhw subsys=endpoint level=info msg="Successful endpoint creation" containerID=92dd80da1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=824 identity=11504 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-ks-endpoints-7pfhw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=92dd80da1f endpointID=824 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-7pfhw subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=de631448-d616-4ad4-83dc-939ed403d9f6 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=de631448-d616-4ad4-83dc-939ed403d9f6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=92dd80da1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=824 identity=11504 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/nova-ks-endpoints-7pfhw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 5c7ab37d-7da5-4fda-a8f1-9384141b043c default }" containerID=1bb5e022c8ff4c87b19d0a5bf8feff7b4bbfbf63fdc505c32aa046643805948f datapathConfiguration="&{false false false false false }" interface=lxc0dafc3191c7b k8sPodName=openstack/nova-ks-user-q5sb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bb5e022c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/nova-ks-user-q5sb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bb5e022c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c67cb239-639e-4677-bf60-652665c4ccfc,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=c67cb239-639e-4677-bf60-652665c4ccfc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/nova-ks-user-q5sb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=c67cb239-639e-4677-bf60-652665c4ccfc;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=c67cb239-639e-4677-bf60-652665c4ccfc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bb5e022c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identity=2106 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c67cb239-639e-4677-bf60-652665c4ccfc,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=c67cb239-639e-4677-bf60-652665c4ccfc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/nova-ks-user-q5sb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bb5e022c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identity=2106 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/nova-ks-user-q5sb2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bb5e022c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1022 identity=2106 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/nova-ks-user-q5sb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bb5e022c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1022 identity=2106 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/nova-ks-user-q5sb2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1bb5e022c8 endpointID=1022 k8sNamespace=openstack k8sPodName=nova-ks-user-q5sb2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=c67cb239-639e-4677-bf60-652665c4ccfc k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=c67cb239-639e-4677-bf60-652665c4ccfc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=1bb5e022c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1022 identity=2106 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/nova-ks-user-q5sb2 subsys=endpoint level=info msg="Delete endpoint request" containerID=1de0cc9a2b endpointID=668 k8sNamespace=openstack k8sPodName=nova-bootstrap-cmvl2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=9d9a8fe0-e75e-4946-a489-da85314b2197 k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=9d9a8fe0-e75e-4946-a489-da85314b2197 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=1de0cc9a2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=668 identity=35806 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/nova-bootstrap-cmvl2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 0e13c5d4-8e4a-46c4-a543-5662676227cc default }" containerID=68c29e414ab0b57f39909d00bdd41ecd4082bacee632f3aa6f087ce418d03014 datapathConfiguration="&{false false false false false }" interface=lxc7fcadcdba50a k8sPodName=local-path-storage/helper-pod-create-pvc-e9eb9662-e6cc-43b1-a52d-03c84ef2e994 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68c29e414a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9eb9662-e6cc-43b1-a52d-03c84ef2e994 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68c29e414a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9eb9662-e6cc-43b1-a52d-03c84ef2e994 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68c29e414a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identity=46931 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9eb9662-e6cc-43b1-a52d-03c84ef2e994 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68c29e414a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identity=46931 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9eb9662-e6cc-43b1-a52d-03c84ef2e994 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68c29e414a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1457 identity=46931 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9eb9662-e6cc-43b1-a52d-03c84ef2e994 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68c29e414a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1457 identity=46931 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9eb9662-e6cc-43b1-a52d-03c84ef2e994 subsys=daemon level=info msg="Delete endpoint request" containerID=68c29e414a endpointID=1457 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e9eb9662-e6cc-43b1-a52d-03c84ef2e994 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=68c29e414a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1457 identity=46931 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9eb9662-e6cc-43b1-a52d-03c84ef2e994 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 466c774d-2d81-4bbb-a602-606ab3dba999 default }" containerID=29948fcc242bd44b476a3efe804f6032f148a2c1878e5b4510cb20cdd2ab09f2 datapathConfiguration="&{false false false false false }" interface=lxc99ca898ddedf k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29948fcc24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29948fcc24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=29948fcc24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29948fcc24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identity=38251 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29948fcc24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identity=38251 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29948fcc24 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=217 identity=38251 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=29948fcc24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=217 identity=38251 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 5f632b3d-9f7b-4723-a4a4-e28432bb1d4b default }" containerID=9fd6822f37b7596fc65e86b79ac1b926d4d4016854e50d5c14a2f95e9289e9ed datapathConfiguration="&{false false false false false }" interface=lxc9aedcb1178e8 k8sPodName=openstack/neutron-server-58d89654b5-nwn7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fd6822f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/neutron-server-58d89654b5-nwn7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fd6822f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/neutron-server-58d89654b5-nwn7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9fd6822f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=openstack/neutron-server-58d89654b5-nwn7b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9fd6822f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identity=18203 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/neutron-server-58d89654b5-nwn7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fd6822f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identity=18203 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/neutron-server-58d89654b5-nwn7b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 a1238ef4-62e2-4b46-b200-1da4fac0ca98 default }" containerID=825364996bc42565fbf033f3f0695371d67d675e31d63cfc929efcf4cca8b9dd datapathConfiguration="&{false false false false false }" interface=lxc7411efac4633 k8sPodName=openstack/neutron-db-init-zrpkn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=825364996b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/neutron-db-init-zrpkn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=825364996b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=b75f0a5a-8d75-4219-9ffa-8e159fa3d447,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=b75f0a5a-8d75-4219-9ffa-8e159fa3d447,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/neutron-db-init-zrpkn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=b75f0a5a-8d75-4219-9ffa-8e159fa3d447;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=b75f0a5a-8d75-4219-9ffa-8e159fa3d447;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=825364996b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identity=25151 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=b75f0a5a-8d75-4219-9ffa-8e159fa3d447,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=b75f0a5a-8d75-4219-9ffa-8e159fa3d447,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/neutron-db-init-zrpkn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=825364996b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identity=25151 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/neutron-db-init-zrpkn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 f01056a8-63d6-4eb2-9f3f-448f0b6b4867 default }" containerID=28e9860e4836d6304ea1588b1aa6f1c009a485b13b3b7f31aa95342ac1b154da datapathConfiguration="&{false false false false false }" interface=lxc60d5ce0240f5 k8sPodName=openstack/neutron-rpc-server-6cfbd55bf4-c6nj5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28e9860e48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/neutron-rpc-server-6cfbd55bf4-c6nj5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28e9860e48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/neutron-rpc-server-6cfbd55bf4-c6nj5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=9fd6822f37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=977 identity=18203 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/neutron-server-58d89654b5-nwn7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fd6822f37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=977 identity=18203 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/neutron-server-58d89654b5-nwn7b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=825364996b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=433 identity=25151 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/neutron-db-init-zrpkn subsys=endpoint level=info msg="Successful endpoint creation" containerID=825364996b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=433 identity=25151 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/neutron-db-init-zrpkn subsys=daemon level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28e9860e48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=46572 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/neutron-rpc-server-6cfbd55bf4-c6nj5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28e9860e48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=46572 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/neutron-rpc-server-6cfbd55bf4-c6nj5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28e9860e48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=572 identity=46572 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/neutron-rpc-server-6cfbd55bf4-c6nj5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=28e9860e48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=572 identity=46572 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/neutron-rpc-server-6cfbd55bf4-c6nj5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=825364996b endpointID=433 k8sNamespace=openstack k8sPodName=neutron-db-init-zrpkn subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=b75f0a5a-8d75-4219-9ffa-8e159fa3d447 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=b75f0a5a-8d75-4219-9ffa-8e159fa3d447 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=825364996b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=433 identity=25151 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/neutron-db-init-zrpkn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 515d002b-ab33-4b26-be80-a897435408fd default }" containerID=0882e40ded83897773f12220bcb976e98aa4cc58d5988848e2b59868ef3797e9 datapathConfiguration="&{false false false false false }" interface=lxca6de634e686b k8sPodName=openstack/neutron-db-sync-mzpns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0882e40ded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-db-sync-mzpns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0882e40ded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=9cb512a8-b926-4113-94d1-7a26b7768961,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=9cb512a8-b926-4113-94d1-7a26b7768961,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-db-sync-mzpns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0882e40ded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-db-sync-mzpns line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=9cb512a8-b926-4113-94d1-7a26b7768961;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=9cb512a8-b926-4113-94d1-7a26b7768961;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0882e40ded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=9689 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=9cb512a8-b926-4113-94d1-7a26b7768961,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=9cb512a8-b926-4113-94d1-7a26b7768961,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-db-sync-mzpns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0882e40ded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=9689 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-db-sync-mzpns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0882e40ded datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1080 identity=9689 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-db-sync-mzpns subsys=endpoint level=info msg="Successful endpoint creation" containerID=0882e40ded datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1080 identity=9689 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-db-sync-mzpns subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0882e40ded endpointID=1080 k8sNamespace=openstack k8sPodName=neutron-db-sync-mzpns subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=9cb512a8-b926-4113-94d1-7a26b7768961 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=9cb512a8-b926-4113-94d1-7a26b7768961 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=0882e40ded datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1080 identity=9689 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-db-sync-mzpns subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 7987e823-80a7-4f50-afc9-7951534f06a9 default }" containerID=8d93a83dffbc4bf96cf7f98c8972c33d61d7e1367834e47e43fc9b6ead2544f3 datapathConfiguration="&{false false false false false }" interface=lxc518800a7690e k8sPodName=openstack/neutron-rabbit-init-269jk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d93a83dff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-rabbit-init-269jk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d93a83dff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=9bba96fa-1d82-49db-a674-b19ff85d1c65,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9bba96fa-1d82-49db-a674-b19ff85d1c65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-rabbit-init-269jk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=9bba96fa-1d82-49db-a674-b19ff85d1c65;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9bba96fa-1d82-49db-a674-b19ff85d1c65;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d93a83dff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=9578 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=9bba96fa-1d82-49db-a674-b19ff85d1c65,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9bba96fa-1d82-49db-a674-b19ff85d1c65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-rabbit-init-269jk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d93a83dff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=9578 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-rabbit-init-269jk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d93a83dff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=249 identity=9578 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-rabbit-init-269jk subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d93a83dff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=249 identity=9578 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-rabbit-init-269jk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d93a83dff endpointID=249 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-269jk subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=9bba96fa-1d82-49db-a674-b19ff85d1c65 k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9bba96fa-1d82-49db-a674-b19ff85d1c65 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=8d93a83dff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=249 identity=9578 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/neutron-rabbit-init-269jk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 5e96c535-2bc5-4521-ad82-972d1c592188 default }" containerID=9ac0d3c756b813ab72411e91032e297cbb207eac9a91b632d6a66c7725a1c418 datapathConfiguration="&{false false false false false }" interface=lxc0dbb68c5dac4 k8sPodName=openstack/neutron-ks-service-r5kgp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ac0d3c756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/neutron-ks-service-r5kgp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ac0d3c756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2f9cfbe2-0734-4adf-b039-926f3cee61b9,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=2f9cfbe2-0734-4adf-b039-926f3cee61b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/neutron-ks-service-r5kgp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=2f9cfbe2-0734-4adf-b039-926f3cee61b9;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=2f9cfbe2-0734-4adf-b039-926f3cee61b9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9ac0d3c756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.48 ipv6= k8sPodName=openstack/neutron-ks-service-r5kgp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9ac0d3c756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 identity=4076 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2f9cfbe2-0734-4adf-b039-926f3cee61b9,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=2f9cfbe2-0734-4adf-b039-926f3cee61b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/neutron-ks-service-r5kgp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ac0d3c756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 identity=4076 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/neutron-ks-service-r5kgp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ac0d3c756 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2013 identity=4076 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/neutron-ks-service-r5kgp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ac0d3c756 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2013 identity=4076 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/neutron-ks-service-r5kgp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9ac0d3c756 endpointID=2013 k8sNamespace=openstack k8sPodName=neutron-ks-service-r5kgp subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=2f9cfbe2-0734-4adf-b039-926f3cee61b9 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=2f9cfbe2-0734-4adf-b039-926f3cee61b9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=9ac0d3c756 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2013 identity=4076 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/neutron-ks-service-r5kgp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 187396a8-d14b-42cf-91e7-70270c722f11 default }" containerID=186ad296ad80b3832bd6fd37ba65332af5ef80f433fbf5e889356c0ece5fa2bf datapathConfiguration="&{false false false false false }" interface=lxc28ab3fa7c1a4 k8sPodName=openstack/neutron-ks-endpoints-9vxlv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=186ad296ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/neutron-ks-endpoints-9vxlv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=186ad296ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=00e66a64-8822-4a0a-8b77-a48f92a72ef5,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=00e66a64-8822-4a0a-8b77-a48f92a72ef5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/neutron-ks-endpoints-9vxlv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=00e66a64-8822-4a0a-8b77-a48f92a72ef5;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=00e66a64-8822-4a0a-8b77-a48f92a72ef5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=186ad296ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identity=21984 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=00e66a64-8822-4a0a-8b77-a48f92a72ef5,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=00e66a64-8822-4a0a-8b77-a48f92a72ef5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/neutron-ks-endpoints-9vxlv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=186ad296ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identity=21984 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/neutron-ks-endpoints-9vxlv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=186ad296ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1581 identity=21984 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/neutron-ks-endpoints-9vxlv subsys=endpoint level=info msg="Successful endpoint creation" containerID=186ad296ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1581 identity=21984 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/neutron-ks-endpoints-9vxlv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=186ad296ad endpointID=1581 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-9vxlv subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=00e66a64-8822-4a0a-8b77-a48f92a72ef5 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=00e66a64-8822-4a0a-8b77-a48f92a72ef5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=186ad296ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1581 identity=21984 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/neutron-ks-endpoints-9vxlv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 89759df4-b21d-4d92-a71c-391668da2605 default }" containerID=cc84b5261923315d977966b06216d5754ecabda9adf7a374ba8c8461976756fd datapathConfiguration="&{false false false false false }" interface=lxc4fda7a1599aa k8sPodName=openstack/neutron-ks-user-2rcwx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc84b52619 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-ks-user-2rcwx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc84b52619 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=6992b6e7-7d73-4d15-a061-02ca7311f07f,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=6992b6e7-7d73-4d15-a061-02ca7311f07f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-ks-user-2rcwx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cc84b52619 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-ks-user-2rcwx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=6992b6e7-7d73-4d15-a061-02ca7311f07f;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=6992b6e7-7d73-4d15-a061-02ca7311f07f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc84b52619 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=3117 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=6992b6e7-7d73-4d15-a061-02ca7311f07f,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=6992b6e7-7d73-4d15-a061-02ca7311f07f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-ks-user-2rcwx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc84b52619 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=3117 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-ks-user-2rcwx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc84b52619 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=504 identity=3117 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-ks-user-2rcwx subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc84b52619 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=504 identity=3117 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-ks-user-2rcwx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cc84b52619 endpointID=504 k8sNamespace=openstack k8sPodName=neutron-ks-user-2rcwx subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=6992b6e7-7d73-4d15-a061-02ca7311f07f k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=6992b6e7-7d73-4d15-a061-02ca7311f07f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=cc84b52619 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=504 identity=3117 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/neutron-ks-user-2rcwx subsys=endpoint