level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.087491ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="58.681µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.187643ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="24.071µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=110.896495ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="28.78µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="31.76µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="103.942µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="106.522µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="123.012µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="594.971µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.85µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.725537ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.728336ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="53.521µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="128.522µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="356.966µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="202.843µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="64.891µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=44.757408ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="94.031µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="5.24µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.156.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.007064ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="17.941µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.030165ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.511846ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="4.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.16µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="28.38µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="81.991µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="32.021µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="241.154µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.13µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.49µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="171.043µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="854.077µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="830.575µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="7.56µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.461µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.156 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.156 ipAddr.ipv6="" k8sNodeIP=199.204.45.156 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.156" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.192" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.156" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.156} {CiliumInternalIP 10.0.0.192}] 10.0.0.0/24 [] [] 10.0.0.8 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46175" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.472653214s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="32.54µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="38.2µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="119.953µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="8.84µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3613 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3613 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3613 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.428083975s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=287.213065ms file-path=/var/run/cilium/state/templates/ae3c203d3452bb6a369d1606ea2e7374bdd0c2bedcfbf1d09102db1d39d0dfb6/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3613 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 ipv4=10.0.0.8 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identityLabels="reserved:health" ipv4=10.0.0.8 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identity=4 identityLabels="reserved:health" ipv4=10.0.0.8 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 be33305a-9c03-4206-8c3e-5ccbcd59ed35 default }" containerID=f44bff094676071430461f2846e42f2c52eb1f01023b4684ebe98288ede25d23 datapathConfiguration="&{false false false false false }" interface=lxcd1c6744d2b0e k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qsw7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f44bff0946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 ipv4=10.0.0.149 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qsw7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f44bff0946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=040446e6-fe3e-4052-8f97-d4b96bdebc77,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=040446e6-fe3e-4052-8f97-d4b96bdebc77,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.149 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qsw7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.253 2b0cd161-8c1d-4d4f-ab78-b5e1c54cfa13 default }" containerID=d5f376c28e05e193a0ef26c87d3ccfb41c8c2e118d2efd4be98b6023084b93ae datapathConfiguration="&{false false false false false }" interface=lxc4f0388a57b21 k8sPodName=kube-system/coredns-7c96b6546b-cvqc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5f376c28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 ipv4=10.0.0.253 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cvqc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5f376c28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.253 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cvqc2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=040446e6-fe3e-4052-8f97-d4b96bdebc77;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=040446e6-fe3e-4052-8f97-d4b96bdebc77;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f44bff0946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identity=7280 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=040446e6-fe3e-4052-8f97-d4b96bdebc77,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=040446e6-fe3e-4052-8f97-d4b96bdebc77,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.149 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qsw7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f44bff0946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identity=7280 ipv4=10.0.0.149 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qsw7 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=d5f376c28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.253 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cvqc2 line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5f376c28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=951 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.253 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cvqc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5f376c28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=951 ipv4=10.0.0.253 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cvqc2 subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.067717495s file-path=/var/run/cilium/state/templates/1a08faa34d0bad983a4666a6e228d8e0f799b2a42fcc74cf24696f9799dc59e6/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=d5f376c28e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=10 identity=951 ipv4=10.0.0.253 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cvqc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5f376c28e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=10 identity=951 ipv4=10.0.0.253 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cvqc2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3123 identity=4 ipv4=10.0.0.8 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f44bff0946 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=826 identity=7280 ipv4=10.0.0.149 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qsw7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f44bff0946 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=826 identity=7280 ipv4=10.0.0.149 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qsw7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f44bff0946 endpointID=826 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-9qsw7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=040446e6-fe3e-4052-8f97-d4b96bdebc77 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=040446e6-fe3e-4052-8f97-d4b96bdebc77 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=f44bff0946 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=826 identity=7280 ipv4=10.0.0.149 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qsw7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 a26f638e-4cb5-4f3e-8179-8588570cf527 default }" containerID=4d19377d1a1bd28b486b1f0f8bf5a7cbd3032f5d7a2622954dfc7b708cae5cfd datapathConfiguration="&{false false false false false }" interface=lxcaf12381a8f51 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4mlc7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d19377d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4mlc7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d19377d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4mlc7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d19377d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 identity=4282 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4mlc7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4d19377d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 identity=4282 ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4mlc7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d19377d1a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=19 identity=4282 ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4mlc7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d19377d1a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=19 identity=4282 ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4mlc7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3613 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03613 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03613 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03613 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03613:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3613 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 3b487a30-fffb-4f3f-9d2a-6d3f7c4e7de8 default }" containerID=3ca1eb827087648f682e9e029c8e1b8596ef651eccf5b98b9bdd9b8f9b8b979a datapathConfiguration="&{false false false false false }" interface=lxc186ac82eae62 k8sPodName=kube-system/coredns-67659f764b-r2m9r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ca1eb8270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 ipv4=10.0.0.239 ipv6= k8sPodName=kube-system/coredns-67659f764b-r2m9r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ca1eb8270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.239 ipv6= k8sPodName=kube-system/coredns-67659f764b-r2m9r subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3ca1eb8270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identity=951 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.239 ipv6= k8sPodName=kube-system/coredns-67659f764b-r2m9r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ca1eb8270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identity=951 ipv4=10.0.0.239 ipv6= k8sPodName=kube-system/coredns-67659f764b-r2m9r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ca1eb8270 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=932 identity=951 ipv4=10.0.0.239 ipv6= k8sPodName=kube-system/coredns-67659f764b-r2m9r subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ca1eb8270 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=932 identity=951 ipv4=10.0.0.239 ipv6= k8sPodName=kube-system/coredns-67659f764b-r2m9r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.97 84f39189-0750-41e9-a73f-f78209b71bb4 default }" containerID=ff3ebeeb898d6608284fb27798e6b27ca4dd8ebd61e856b9737b8290b74f541b datapathConfiguration="&{false false false false false }" interface=lxc84cf21f7c8b0 k8sPodName=kube-system/coredns-67659f764b-72bwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff3ebeeb89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 ipv4=10.0.0.97 ipv6= k8sPodName=kube-system/coredns-67659f764b-72bwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff3ebeeb89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.97 ipv6= k8sPodName=kube-system/coredns-67659f764b-72bwn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ff3ebeeb89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identity=951 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.97 ipv6= k8sPodName=kube-system/coredns-67659f764b-72bwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff3ebeeb89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identity=951 ipv4=10.0.0.97 ipv6= k8sPodName=kube-system/coredns-67659f764b-72bwn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff3ebeeb89 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2301 identity=951 ipv4=10.0.0.97 ipv6= k8sPodName=kube-system/coredns-67659f764b-72bwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff3ebeeb89 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2301 identity=951 ipv4=10.0.0.97 ipv6= k8sPodName=kube-system/coredns-67659f764b-72bwn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 d9853060-aaa6-4b1c-8694-6e21a18974f4 default }" containerID=4cef0a539c0c2de6874446b83fccc740fd6dbffe408503e2375f4e85b10bd95d datapathConfiguration="&{false false false false false }" interface=lxc3b321984d3f4 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8xtxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cef0a539c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8xtxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cef0a539c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8xtxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4cef0a539c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8xtxw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4cef0a539c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 identity=7775 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8xtxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cef0a539c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 identity=7775 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8xtxw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cef0a539c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2963 identity=7775 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8xtxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cef0a539c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2963 identity=7775 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8xtxw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d5f376c28e endpointID=10 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-cvqc2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=d5f376c28e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=10 identity=951 ipv4=10.0.0.253 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cvqc2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 9c42d252-7906-4aea-afa7-5409a012bb31 default }" containerID=f6494607587db31f239af708eed87bc2837190b086aad53ad1eddd1cc50cf275 datapathConfiguration="&{false false false false false }" interface=lxcb6afbe1f54c7 k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-9prlq labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.243 5160a848-570b-470e-b184-fb5a0ed1a1bc default }" containerID=e408a4475007ac188544bbd8eb7971d1a65bea7f2a8d4db8aaa8b606f4c1e266 datapathConfiguration="&{false false false false false }" interface=lxccd400f17461b k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-qqr9l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f649460758 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-9prlq subsys=endpoint level=info msg="New endpoint" containerID=e408a44750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 ipv4=10.0.0.243 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-qqr9l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f649460758 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-9prlq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=e408a44750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.243 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-qqr9l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 5252d6f5-a8e4-46f6-a88f-ab6adf4f0497 default }" containerID=58672450b6500a6a7923f361de8fd778ae45df9b31e7258271ab3cdd4d5bc8ac datapathConfiguration="&{false false false false false }" interface=lxc1aa83f557bde k8sPodName=cert-manager/cert-manager-79c48d47db-gz668 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58672450b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1282 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-gz668 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58672450b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1282 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-gz668 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e408a44750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.243 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-qqr9l line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=f649460758 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-9prlq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f649460758 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identity=7293 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-9prlq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f649460758 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identity=7293 ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-9prlq subsys=endpoint level=info msg="Invalid state transition skipped" containerID=58672450b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1282 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-gz668 line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e408a44750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=11247 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.243 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-qqr9l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e408a44750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=11247 ipv4=10.0.0.243 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-qqr9l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58672450b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1282 identity=30610 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-gz668 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58672450b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1282 identity=30610 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-gz668 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f649460758 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=404 identity=7293 ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-9prlq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f649460758 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=404 identity=7293 ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-9prlq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=58672450b6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1282 identity=30610 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-gz668 subsys=endpoint level=info msg="Successful endpoint creation" containerID=58672450b6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1282 identity=30610 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-gz668 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e408a44750 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=223 identity=11247 ipv4=10.0.0.243 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-qqr9l subsys=endpoint level=info msg="Successful endpoint creation" containerID=e408a44750 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=223 identity=11247 ipv4=10.0.0.243 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-qqr9l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.47 a785f76f-79ec-45b2-8d62-a2c303798d1d default }" containerID=ae6afab86a93ad00f49b27312e86f21cc7d1c6fc5c14cc2ab9789d407962a0bc datapathConfiguration="&{false false false false false }" interface=lxcb2e08ce592be k8sPodName=cert-manager/cert-manager-startupapicheck-8l5ln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae6afab86a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2628 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8l5ln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae6afab86a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2628 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=339c4b5d-738f-4bce-a1fa-710770b615dc,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=339c4b5d-738f-4bce-a1fa-710770b615dc,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8l5ln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=339c4b5d-738f-4bce-a1fa-710770b615dc;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=339c4b5d-738f-4bce-a1fa-710770b615dc;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae6afab86a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2628 identity=41682 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=339c4b5d-738f-4bce-a1fa-710770b615dc,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=339c4b5d-738f-4bce-a1fa-710770b615dc,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8l5ln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae6afab86a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2628 identity=41682 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8l5ln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae6afab86a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2628 identity=41682 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8l5ln subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae6afab86a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2628 identity=41682 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8l5ln subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae6afab86a endpointID=2628 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-8l5ln subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=339c4b5d-738f-4bce-a1fa-710770b615dc k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=339c4b5d-738f-4bce-a1fa-710770b615dc k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=ae6afab86a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2628 identity=41682 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8l5ln subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 bc6efa04-e081-4bac-a2b6-15e4018ba753 default }" containerID=53e2dba9b1dffb4615b9251a32b5e5b81f847dcae0747989c7c06ba305723047 datapathConfiguration="&{false false false false false }" interface=lxcd20a1638d758 k8sPodName=ingress-nginx/ingress-nginx-admission-create-nnktp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53e2dba9b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 ipv4=10.0.0.216 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nnktp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53e2dba9b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=368caf86-7fd7-401a-addf-c7acc6246575,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=368caf86-7fd7-401a-addf-c7acc6246575,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.216 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nnktp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=53e2dba9b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nnktp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=368caf86-7fd7-401a-addf-c7acc6246575;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=368caf86-7fd7-401a-addf-c7acc6246575;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53e2dba9b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=45539 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=368caf86-7fd7-401a-addf-c7acc6246575,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=368caf86-7fd7-401a-addf-c7acc6246575,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.216 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nnktp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53e2dba9b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=45539 ipv4=10.0.0.216 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nnktp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53e2dba9b1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=15 identity=45539 ipv4=10.0.0.216 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nnktp subsys=endpoint level=info msg="Successful endpoint creation" containerID=53e2dba9b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=15 identity=45539 ipv4=10.0.0.216 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nnktp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=53e2dba9b1 endpointID=15 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-nnktp subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=368caf86-7fd7-401a-addf-c7acc6246575 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=368caf86-7fd7-401a-addf-c7acc6246575 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=53e2dba9b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=15 identity=45539 ipv4=10.0.0.216 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-nnktp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 80c32646-e18b-4aa1-a0ad-5021f147a5e3 default }" containerID=51aa1aec147b1c3fbc65740f5d6ef0ffa72c7fa584ad2946644be2488f616135 datapathConfiguration="&{false false false false false }" interface=lxc11a617a29229 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m9zbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51aa1aec14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m9zbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51aa1aec14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m9zbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=51aa1aec14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m9zbm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=51aa1aec14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=65469 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m9zbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51aa1aec14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=65469 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m9zbm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51aa1aec14 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=923 identity=65469 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m9zbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=51aa1aec14 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=923 identity=65469 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m9zbm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.115 2979e48d-3612-40f2-a3e2-d4b5949caf49 default }" containerID=fcca5c2a995f49478cbf265a5f5c5c75c96e1af72fa7184e888f64b908c0a284 datapathConfiguration="&{false false false false false }" interface=lxcd7db4e5ec369 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5nxg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcca5c2a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 ipv4=10.0.0.115 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5nxg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcca5c2a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cd127a0d-69ea-47ed-846d-53b8d2db82b3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=cd127a0d-69ea-47ed-846d-53b8d2db82b3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.115 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5nxg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=cd127a0d-69ea-47ed-846d-53b8d2db82b3;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=cd127a0d-69ea-47ed-846d-53b8d2db82b3;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fcca5c2a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=35771 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cd127a0d-69ea-47ed-846d-53b8d2db82b3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=cd127a0d-69ea-47ed-846d-53b8d2db82b3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.115 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5nxg2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fcca5c2a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=35771 ipv4=10.0.0.115 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5nxg2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fcca5c2a99 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2342 identity=35771 ipv4=10.0.0.115 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5nxg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcca5c2a99 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2342 identity=35771 ipv4=10.0.0.115 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5nxg2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fcca5c2a99 endpointID=2342 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-5nxg2 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=cd127a0d-69ea-47ed-846d-53b8d2db82b3 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=cd127a0d-69ea-47ed-846d-53b8d2db82b3 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=fcca5c2a99 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2342 identity=35771 ipv4=10.0.0.115 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5nxg2 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0e9914b2-edc6-43eb-8e62-2ceb4f924ecf] Description:}]" policyAddRequest=3ccc439c-adad-4dc1-a5b0-cfbf26ab3c13 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3ccc439c-adad-4dc1-a5b0-cfbf26ab3c13 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=58bccebd-e7c3-4c90-b049-dad86dd11659] Description:}]" policyAddRequest=414da928-3766-4748-9c6f-cb763be772c4 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=414da928-3766-4748-9c6f-cb763be772c4 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.29 34a4950a-ffa1-4eb4-8b79-893d41543be0 default }" containerID=f50714bb563cf7a087d410b1c094eb5416f35f120b27845b737735f5c62a5160 datapathConfiguration="&{false false false false false }" interface=lxc9309f4e43ee4 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c68rq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f50714bb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=909 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c68rq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f50714bb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=909 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c68rq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f50714bb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=909 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c68rq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f50714bb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=909 identity=18409 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c68rq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f50714bb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=909 identity=18409 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c68rq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f50714bb56 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=909 identity=18409 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c68rq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f50714bb56 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=909 identity=18409 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c68rq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.246 7caf825f-4c45-44e2-ae80-701f5fc8026f default }" containerID=367de06e887f4d0cca79d8b5c59d24b16436137dd9e984cc0dc6f55ba265ec01 datapathConfiguration="&{false false false false false }" interface=lxc74e311e48fd8 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4jxjb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=367de06e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4jxjb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=367de06e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4jxjb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=367de06e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=10177 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4jxjb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=367de06e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=10177 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4jxjb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=367de06e88 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=885 identity=10177 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4jxjb subsys=endpoint level=info msg="Successful endpoint creation" containerID=367de06e88 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=885 identity=10177 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4jxjb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.71 45b806ea-3c53-4d35-bdc9-2f97594a9441 default }" containerID=f763b71cd16b52109b7e821349125a65ac471d94a22275bffcee8053a97152a9 datapathConfiguration="&{false false false false false }" interface=lxcb7b3a6ab80eb k8sPodName=openstack/pxc-operator-69cb5bbdb9-h6qlc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f763b71cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h6qlc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f763b71cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h6qlc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f763b71cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h6qlc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f763b71cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 identity=18746 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h6qlc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f763b71cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 identity=18746 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h6qlc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f763b71cd1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1048 identity=18746 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h6qlc subsys=endpoint level=info msg="Successful endpoint creation" containerID=f763b71cd1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1048 identity=18746 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h6qlc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.87 73d1e2f8-0853-4f44-9cf0-8e360b8bb45e default }" containerID=0f54c7db3aec690fb3a517b31b68c69361e3db71fd496df66a30122ec2392988 datapathConfiguration="&{false false false false false }" interface=lxc9485e184c090 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f54c7db3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f54c7db3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0f54c7db3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0f54c7db3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 identity=31129 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f54c7db3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 identity=31129 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 e9696287-baee-4b6e-9804-fa49c4b6ef21 default }" containerID=c6956933d5ba4069d68a3b48d1b70dbc100e1e7c8f9d38dedc767e54f1e64968 datapathConfiguration="&{false false false false false }" interface=lxcb3e85d6a9918 k8sPodName=local-path-storage/helper-pod-create-pvc-e479f02c-1145-4363-b2fb-56ee50565b24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6956933d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 ipv4=10.0.0.21 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e479f02c-1145-4363-b2fb-56ee50565b24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6956933d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.21 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e479f02c-1145-4363-b2fb-56ee50565b24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6956933d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=3444 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.21 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e479f02c-1145-4363-b2fb-56ee50565b24 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6956933d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=3444 ipv4=10.0.0.21 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e479f02c-1145-4363-b2fb-56ee50565b24 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f54c7db3a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1961 identity=31129 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f54c7db3a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1961 identity=31129 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c6956933d5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=103 identity=3444 ipv4=10.0.0.21 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e479f02c-1145-4363-b2fb-56ee50565b24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6956933d5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=103 identity=3444 ipv4=10.0.0.21 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e479f02c-1145-4363-b2fb-56ee50565b24 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c6956933d5 endpointID=103 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e479f02c-1145-4363-b2fb-56ee50565b24 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c6956933d5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=103 identity=3444 ipv4=10.0.0.21 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e479f02c-1145-4363-b2fb-56ee50565b24 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 00143211-9294-4551-a5cc-3441ae0528ee default }" containerID=83e04a3d8cb9f584bde2fc8f79d1945f649e1b317f6575f947e13596355d3f0c datapathConfiguration="&{false false false false false }" interface=lxc1e7c9525632f k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83e04a3d8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2246 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83e04a3d8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2246 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=83e04a3d8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2246 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83e04a3d8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2246 identity=24735 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83e04a3d8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2246 identity=24735 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83e04a3d8c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2246 identity=24735 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=83e04a3d8c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2246 identity=24735 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=fed15c0c-966a-49a8-b3db-b72a83df2e55] Description:}]" policyAddRequest=96fc2872-2c98-4e55-b2d0-b7e671bad82a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=96fc2872-2c98-4e55-b2d0-b7e671bad82a policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.60 ef9ca61b-efee-475c-9c97-fc7db5db38c1 default }" containerID=8ff12a6a5bf18f4c26e2a618514106915007ef9e9949d0a6bb9ebc51a6ed4a9d datapathConfiguration="&{false false false false false }" interface=lxc72c590d7dd00 k8sPodName=local-path-storage/helper-pod-create-pvc-d434d38f-e9b2-4525-b73a-b5ccd6f91f65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ff12a6a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d434d38f-e9b2-4525-b73a-b5ccd6f91f65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ff12a6a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d434d38f-e9b2-4525-b73a-b5ccd6f91f65 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ff12a6a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 identity=3444 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d434d38f-e9b2-4525-b73a-b5ccd6f91f65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ff12a6a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 identity=3444 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d434d38f-e9b2-4525-b73a-b5ccd6f91f65 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ff12a6a5b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2824 identity=3444 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d434d38f-e9b2-4525-b73a-b5ccd6f91f65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ff12a6a5b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2824 identity=3444 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d434d38f-e9b2-4525-b73a-b5ccd6f91f65 subsys=daemon level=info msg="Delete endpoint request" containerID=8ff12a6a5b endpointID=2824 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d434d38f-e9b2-4525-b73a-b5ccd6f91f65 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8ff12a6a5b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2824 identity=3444 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d434d38f-e9b2-4525-b73a-b5ccd6f91f65 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 8e8d472f-8690-4fc6-b319-5e9d96631a44 default }" containerID=fe70d1ce35e3c26a85647ec52beca377f60440ebc79651dab942f93f22ed7a64 datapathConfiguration="&{false false false false false }" interface=lxc300d259616f6 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe70d1ce35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe70d1ce35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe70d1ce35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identity=25669 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe70d1ce35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identity=25669 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fe70d1ce35 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1302 identity=25669 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe70d1ce35 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1302 identity=25669 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=74694bb1-9d88-4f57-adb0-679fa64d9030] Description:}]" policyAddRequest=35c79584-71cf-4f8a-be6f-dcd3ec2d2e7e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=35c79584-71cf-4f8a-be6f-dcd3ec2d2e7e policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.101 12b65b1f-0179-4a70-87fb-efb186a42f47 default }" containerID=071f257f3484e71ee1b0fa1e92dbd7dc58a09796bde05905e9535f9b8b13148d datapathConfiguration="&{false false false false false }" interface=lxce61bed475a70 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=071f257f34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 ipv4=10.0.0.101 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=071f257f34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.101 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=071f257f34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.101 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=071f257f34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identity=26394 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.101 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=071f257f34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identity=26394 ipv4=10.0.0.101 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=071f257f34 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1262 identity=26394 ipv4=10.0.0.101 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=071f257f34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1262 identity=26394 ipv4=10.0.0.101 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.007950410540127423 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.3 493da228-8d5a-4bf6-a43e-10afc3b47f82 default }" containerID=abcc486517fa25ecc5644ad8cb6711bc9aaede60e113aaa0340804717bef9f8d datapathConfiguration="&{false false false false false }" interface=lxc20173223dba3 k8sPodName=monitoring/node-feature-discovery-worker-f84ck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abcc486517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f84ck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abcc486517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f84ck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abcc486517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 identity=32904 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f84ck oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=abcc486517 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1149 identity=32904 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f84ck subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 9719bf73-58e4-4a0a-b075-5858473b170d default }" containerID=35e28004a8c4659de5638a00c5724b7b8bdaded07844886851db63d972c9f62e datapathConfiguration="&{false false false false false }" interface=lxcfd0eceab3ee1 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sccxx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35e28004a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sccxx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35e28004a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sccxx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35e28004a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=25342 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sccxx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35e28004a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=25342 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sccxx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abcc486517 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1149 identity=32904 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f84ck subsys=endpoint level=info msg="Successful endpoint creation" containerID=abcc486517 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1149 identity=32904 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f84ck subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.126 502d5142-d2f6-44e4-af39-664cb6ee9065 default }" containerID=8db759551891e6fe37986dfae7c06ca33830cbb83d5ef04de4f26fef66cf982a datapathConfiguration="&{false false false false false }" interface=lxcc76fa2796af7 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hwn9w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8db7595518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hwn9w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8db7595518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hwn9w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8db7595518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=578 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hwn9w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8db7595518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=578 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hwn9w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35e28004a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=194 identity=25342 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sccxx subsys=endpoint level=info msg="Successful endpoint creation" containerID=35e28004a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=25342 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sccxx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8db7595518 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1152 identity=578 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hwn9w subsys=endpoint level=info msg="Successful endpoint creation" containerID=8db7595518 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1152 identity=578 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hwn9w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 f6ac43f8-36b0-499a-9efc-148bb7828b92 default }" containerID=611829efbfb865db51a27f67bd64f1ac7d01250fb763a1ca3b1c8dbf904c455a datapathConfiguration="&{false false false false false }" interface=lxcc2b1556c3d21 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n2ggl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=611829efbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2313 ipv4=10.0.0.92 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n2ggl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=611829efbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2313 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.92 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n2ggl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=611829efbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2313 identity=5795 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.92 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n2ggl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=611829efbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2313 identity=5795 ipv4=10.0.0.92 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n2ggl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=611829efbf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2313 identity=5795 ipv4=10.0.0.92 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n2ggl subsys=endpoint level=info msg="Successful endpoint creation" containerID=611829efbf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2313 identity=5795 ipv4=10.0.0.92 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n2ggl subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3613 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-185-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03613 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03613 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03613 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03613:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3613 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 a92884b7-ec3d-4b90-88a0-9840d6712652 default }" containerID=94befec6e35f2121e0eaba1c1c42ce36e2d2b882f2e38e8b5b2a18ba5a17a180 datapathConfiguration="&{false false false false false }" interface=lxc6656135eeab7 k8sPodName=monitoring/kube-prometheus-stack-admission-create-5hm4k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94befec6e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5hm4k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94befec6e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=80c5cbed-7adb-4eff-ab59-20b92162ed94,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=80c5cbed-7adb-4eff-ab59-20b92162ed94,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5hm4k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=80c5cbed-7adb-4eff-ab59-20b92162ed94;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=80c5cbed-7adb-4eff-ab59-20b92162ed94;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94befec6e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identity=25058 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=80c5cbed-7adb-4eff-ab59-20b92162ed94,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=80c5cbed-7adb-4eff-ab59-20b92162ed94,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5hm4k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94befec6e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identity=25058 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5hm4k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=94befec6e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1810 identity=25058 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5hm4k subsys=endpoint level=info msg="Successful endpoint creation" containerID=94befec6e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1810 identity=25058 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5hm4k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=94befec6e3 endpointID=1810 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-5hm4k subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=80c5cbed-7adb-4eff-ab59-20b92162ed94 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=80c5cbed-7adb-4eff-ab59-20b92162ed94 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=94befec6e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1810 identity=25058 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5hm4k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 607fb471-b672-496a-a785-898f1fa96cdd default }" containerID=1913c6a3a72fc375b4534ecb8c0e758b0aea659bc7d3c9ab69ae07e0c775e595 datapathConfiguration="&{false false false false false }" interface=lxc40aae70ff31a k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wdrd5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1913c6a3a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wdrd5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1913c6a3a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wdrd5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1913c6a3a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identity=47422 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wdrd5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1913c6a3a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identity=47422 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wdrd5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1913c6a3a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=499 identity=47422 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wdrd5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1913c6a3a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=499 identity=47422 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wdrd5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 2bc1e4ad-3e0a-4b42-b197-2364cec4dcf8 default }" containerID=ce3c7aa4370513fb4264db6b42dabb47bf392bf93c1a2ad9c623517f34114c09 datapathConfiguration="&{false false false false false }" interface=lxc44334d193ff3 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4b7dm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce3c7aa437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1690 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4b7dm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce3c7aa437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1690 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4b7dm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.96 d63d0e7f-62e9-4af0-8f4e-aad5166eeedc default }" containerID=88f1883adaffe64bff807b49e182e8925a076d3c719ca6d705c51beb59e218df datapathConfiguration="&{false false false false false }" interface=lxcb3e59ed688b0 k8sPodName=monitoring/kube-prometheus-stack-grafana-8497fcff9b-mjw9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88f1883ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2362 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8497fcff9b-mjw9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88f1883ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2362 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8497fcff9b-mjw9c subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=ce3c7aa437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1690 identity=6449 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4b7dm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce3c7aa437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1690 identity=6449 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4b7dm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88f1883ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2362 identity=50213 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8497fcff9b-mjw9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88f1883ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2362 identity=50213 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8497fcff9b-mjw9c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88f1883ada datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2362 identity=50213 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8497fcff9b-mjw9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=88f1883ada datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2362 identity=50213 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8497fcff9b-mjw9c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ce3c7aa437 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1690 identity=6449 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4b7dm subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce3c7aa437 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1690 identity=6449 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4b7dm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 543f593d-79a3-4563-afc6-164d59d6780f default }" containerID=2c5fb03253f78ff469a0708817d359b34ee13b6da40edd634b75c6bf4b6ae70b datapathConfiguration="&{false false false false false }" interface=lxc00e643e70e64 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sxfg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c5fb03253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sxfg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c5fb03253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c8a68b49-370b-4ad4-b299-c79cb87aa452,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c8a68b49-370b-4ad4-b299-c79cb87aa452,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sxfg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c8a68b49-370b-4ad4-b299-c79cb87aa452;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c8a68b49-370b-4ad4-b299-c79cb87aa452;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c5fb03253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=20365 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c8a68b49-370b-4ad4-b299-c79cb87aa452,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c8a68b49-370b-4ad4-b299-c79cb87aa452,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sxfg2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c5fb03253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=20365 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sxfg2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c5fb03253 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=589 identity=20365 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sxfg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c5fb03253 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=589 identity=20365 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sxfg2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c5fb03253 endpointID=589 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-sxfg2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c8a68b49-370b-4ad4-b299-c79cb87aa452 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c8a68b49-370b-4ad4-b299-c79cb87aa452 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=2c5fb03253 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=589 identity=20365 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sxfg2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 ecea3c51-866c-4762-a5f2-8ef9c12e4e71 default }" containerID=23be6fa941b9cc0d1ce9d5a5be2af4c77789531ead2b31278667ee93b0919ede datapathConfiguration="&{false false false false false }" interface=lxc52cca150fba7 k8sPodName=local-path-storage/helper-pod-create-pvc-dc89c5ea-b48d-4d23-8441-a11e6b126195 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23be6fa941 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc89c5ea-b48d-4d23-8441-a11e6b126195 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23be6fa941 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc89c5ea-b48d-4d23-8441-a11e6b126195 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23be6fa941 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identity=3444 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc89c5ea-b48d-4d23-8441-a11e6b126195 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23be6fa941 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identity=3444 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc89c5ea-b48d-4d23-8441-a11e6b126195 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23be6fa941 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=448 identity=3444 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc89c5ea-b48d-4d23-8441-a11e6b126195 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23be6fa941 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=448 identity=3444 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc89c5ea-b48d-4d23-8441-a11e6b126195 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.4 aa4331ab-0444-43d9-a2ff-4e3244c0c718 default }" containerID=430a68e161e50c934da0e5f04ba169e0c08dd8aae1bafdb4cf69ebfbede6a74b datapathConfiguration="&{false false false false false }" interface=lxcc16f82c3a110 k8sPodName=local-path-storage/helper-pod-create-pvc-b886cc8a-3500-4146-b1c4-eeecc29bc20d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=430a68e161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b886cc8a-3500-4146-b1c4-eeecc29bc20d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=430a68e161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b886cc8a-3500-4146-b1c4-eeecc29bc20d subsys=endpoint level=info msg="Identity of endpoint changed" containerID=430a68e161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=3444 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b886cc8a-3500-4146-b1c4-eeecc29bc20d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=430a68e161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=3444 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b886cc8a-3500-4146-b1c4-eeecc29bc20d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=430a68e161 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=613 identity=3444 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b886cc8a-3500-4146-b1c4-eeecc29bc20d subsys=endpoint level=info msg="Successful endpoint creation" containerID=430a68e161 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=3444 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b886cc8a-3500-4146-b1c4-eeecc29bc20d subsys=daemon level=info msg="Delete endpoint request" containerID=23be6fa941 endpointID=448 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dc89c5ea-b48d-4d23-8441-a11e6b126195 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=430a68e161 endpointID=613 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b886cc8a-3500-4146-b1c4-eeecc29bc20d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=23be6fa941 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=448 identity=3444 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc89c5ea-b48d-4d23-8441-a11e6b126195 subsys=endpoint level=info msg="Removed endpoint" containerID=430a68e161 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=3444 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b886cc8a-3500-4146-b1c4-eeecc29bc20d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 27a27da3-8184-4128-b93b-047a292c211e default }" containerID=3e1df04117637bfc09f1b611500abe84d2a344493d94d447d0228a04cbccacc3 datapathConfiguration="&{false false false false false }" interface=lxca5aad6beb61d k8sPodName=monitoring/loki-gateway-cf54cb88c-9m6d2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e1df04117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9m6d2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e1df04117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9m6d2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e1df04117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identity=3786 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9m6d2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e1df04117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identity=3786 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9m6d2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.116 2b94d051-f74d-414f-aabc-bfe91b19b66b default }" containerID=02cdc4ff4682b67f89fbf26bc709fa4edcad05d80265ee05a4fe59fdff38f12c datapathConfiguration="&{false false false false false }" interface=lxc74eef0d30368 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02cdc4ff46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3148 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 aa35a984-4693-4934-82f3-28e232eb943d default }" containerID=7635f6ee2560288a03c84db34284e1277e2f933299bb8587724ad1fe3b061f2b datapathConfiguration="&{false false false false false }" interface=lxc33e249bdb789 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=02cdc4ff46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3148 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=7635f6ee25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7635f6ee25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02cdc4ff46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3148 identity=33475 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02cdc4ff46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3148 identity=33475 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7635f6ee25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=2725 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7635f6ee25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=2725 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e1df04117 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1950 identity=3786 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9m6d2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e1df04117 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1950 identity=3786 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9m6d2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=02cdc4ff46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3148 identity=33475 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=02cdc4ff46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3148 identity=33475 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7635f6ee25 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=279 identity=2725 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7635f6ee25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=279 identity=2725 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 90e0b91c-0e19-4a61-b122-f085dcba665e default }" containerID=69e5584455331304e4c41e082bb1bc591ec2ab8428a4bf025d334935c5845a5d datapathConfiguration="&{false false false false false }" interface=lxc8fa4e7e87953 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69e5584455 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69e5584455 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69e5584455 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 identity=28938 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69e5584455 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 identity=28938 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69e5584455 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2255 identity=28938 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=69e5584455 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2255 identity=28938 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.188 f2a7deb9-b923-4796-818c-51d6063a44ed default }" containerID=cf41e8a80374f98f12fa7f0c1f94e1718a7746809d63f100cb28d739db4de3dc datapathConfiguration="&{false false false false false }" interface=lxc1508bf75c569 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf41e8a803 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1338 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf41e8a803 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1338 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf41e8a803 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1338 identity=63736 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf41e8a803 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1338 identity=63736 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf41e8a803 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1338 identity=63736 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf41e8a803 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1338 identity=63736 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 1c0a0890-7cb1-40cc-95ec-49727c65e001 default }" containerID=df13e2fe69600545111a0ab4c660a0b8a48d34341a2d1c1ea650df7af4a4fe3d datapathConfiguration="&{false false false false false }" interface=lxc7b710893fce2 k8sPodName=local-path-storage/helper-pod-create-pvc-d42f155e-ec70-40da-a94c-0f51066d238a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df13e2fe69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d42f155e-ec70-40da-a94c-0f51066d238a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df13e2fe69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d42f155e-ec70-40da-a94c-0f51066d238a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df13e2fe69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identity=3444 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d42f155e-ec70-40da-a94c-0f51066d238a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df13e2fe69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identity=3444 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d42f155e-ec70-40da-a94c-0f51066d238a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df13e2fe69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3388 identity=3444 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d42f155e-ec70-40da-a94c-0f51066d238a subsys=endpoint level=info msg="Successful endpoint creation" containerID=df13e2fe69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3388 identity=3444 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d42f155e-ec70-40da-a94c-0f51066d238a subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.175 7d761362-f896-4fd3-8049-562c4b0ac401 default }" containerID=5d6922fa62f3865c6b6fe802f53a038efb434e4c08fc989da23ea738a0f75528 datapathConfiguration="&{false false false false false }" interface=lxc7cdc827f29d4 k8sPodName=monitoring/vector-ffm52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d6922fa62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3198 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-ffm52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d6922fa62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3198 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-ffm52 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d6922fa62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3198 identity=60713 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-ffm52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d6922fa62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3198 identity=60713 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-ffm52 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5d6922fa62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3198 identity=60713 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-ffm52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d6922fa62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3198 identity=60713 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-ffm52 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df13e2fe69 endpointID=3388 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d42f155e-ec70-40da-a94c-0f51066d238a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=df13e2fe69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3388 identity=3444 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d42f155e-ec70-40da-a94c-0f51066d238a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 31494ba1-8ffb-431b-9dad-73593b5e49e1 default }" containerID=fa6176520bfd3e017ba77c719bdf4b713eb54300fd79220d45e79b3e9ddb9b9f datapathConfiguration="&{false false false false false }" interface=lxc65964da63e13 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa6176520b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa6176520b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa6176520b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=18255 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa6176520b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=18255 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fa6176520b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=412 identity=18255 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa6176520b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=412 identity=18255 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.98 d35de651-1133-43f2-bc7c-0480ed0937be default }" containerID=828ef86b05b8ca0f922c3053d2cf959092f8c73c82b87440fa174473eaa48498 datapathConfiguration="&{false false false false false }" interface=lxc2cfa8f8f0949 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5z57d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=828ef86b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5z57d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=828ef86b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5z57d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=828ef86b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 identity=45075 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5z57d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=828ef86b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 identity=45075 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5z57d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=828ef86b05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3231 identity=45075 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5z57d subsys=endpoint level=info msg="Successful endpoint creation" containerID=828ef86b05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3231 identity=45075 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5z57d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 b3dcda39-3901-4f1a-bd28-357f3f48872a default }" containerID=e51ffa66e37e23799f413986bdb7480b8de3b932540d4b6c0f015dd4697e81ba datapathConfiguration="&{false false false false false }" interface=lxc2055399d19f4 k8sPodName=openstack/memcached-memcached-6479589586-sz7kc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e51ffa66e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1570 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sz7kc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e51ffa66e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1570 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sz7kc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e51ffa66e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1570 identity=63040 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sz7kc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e51ffa66e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1570 identity=63040 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sz7kc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e51ffa66e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1570 identity=63040 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sz7kc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e51ffa66e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1570 identity=63040 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sz7kc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.177 5d1e9727-4793-41fd-804b-aa07e9e9d557 default }" containerID=6a87aaf839efd9fda5b3fd9bf450fd619f8b67749390e4a992b51b52b8e53026 datapathConfiguration="&{false false false false false }" interface=lxc840e21fe385e k8sPodName=local-path-storage/helper-pod-create-pvc-450f5cb6-8771-4e53-ac23-c533639e50fd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a87aaf839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-450f5cb6-8771-4e53-ac23-c533639e50fd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a87aaf839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-450f5cb6-8771-4e53-ac23-c533639e50fd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a87aaf839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 identity=3444 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-450f5cb6-8771-4e53-ac23-c533639e50fd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a87aaf839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 identity=3444 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-450f5cb6-8771-4e53-ac23-c533639e50fd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a87aaf839 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3906 identity=3444 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-450f5cb6-8771-4e53-ac23-c533639e50fd subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a87aaf839 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3906 identity=3444 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-450f5cb6-8771-4e53-ac23-c533639e50fd subsys=daemon level=info msg="Delete endpoint request" containerID=6a87aaf839 endpointID=3906 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-450f5cb6-8771-4e53-ac23-c533639e50fd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6a87aaf839 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3906 identity=3444 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-450f5cb6-8771-4e53-ac23-c533639e50fd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 c1da6e25-45ca-4b4f-851d-348316b3123c default }" containerID=30923f6b2b05797f10ea41e9a1f5af46faedd869560b3b9ac3e0b91a5a68ca57 datapathConfiguration="&{false false false false false }" interface=lxc8f8a94033dfc k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30923f6b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30923f6b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=30923f6b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30923f6b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identity=16273 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30923f6b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identity=16273 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30923f6b2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1730 identity=16273 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=30923f6b2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1730 identity=16273 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.171 fd0f6f51-2516-4c0c-9e6f-abedbc37eda3 default }" containerID=0d7a317b3afceeb1223e86b621cf2686a5e87dc9228ed0a944f6700c65786cc6 datapathConfiguration="&{false false false false false }" interface=lxca45ca5d680ce k8sPodName=openstack/keystone-api-f99fb7757-s7r6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d7a317b3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-api-f99fb7757-s7r6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d7a317b3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-api-f99fb7757-s7r6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0d7a317b3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identity=28850 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-api-f99fb7757-s7r6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d7a317b3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identity=28850 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-api-f99fb7757-s7r6t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 8490398e-c024-4595-a900-ce0ff17e912b default }" containerID=a4c5e04434e367cb72bb056445ed2d8d2e2ec7741367ea5851ad6e8f792635c7 datapathConfiguration="&{false false false false false }" interface=lxcd97d2a141a41 k8sPodName=openstack/keystone-credential-setup-nfnln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4c5e04434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-credential-setup-nfnln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4c5e04434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=da960dbd-a3c1-42d6-a366-cae860abb187,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=da960dbd-a3c1-42d6-a366-cae860abb187,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-credential-setup-nfnln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=da960dbd-a3c1-42d6-a366-cae860abb187;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=da960dbd-a3c1-42d6-a366-cae860abb187;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4c5e04434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 identity=11023 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=da960dbd-a3c1-42d6-a366-cae860abb187,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=da960dbd-a3c1-42d6-a366-cae860abb187,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-credential-setup-nfnln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4c5e04434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 identity=11023 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-credential-setup-nfnln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d7a317b3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=364 identity=28850 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-api-f99fb7757-s7r6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d7a317b3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=364 identity=28850 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-api-f99fb7757-s7r6t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a4c5e04434 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2976 identity=11023 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-credential-setup-nfnln subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4c5e04434 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2976 identity=11023 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-credential-setup-nfnln subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a4c5e04434 endpointID=2976 k8sNamespace=openstack k8sPodName=keystone-credential-setup-nfnln subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=da960dbd-a3c1-42d6-a366-cae860abb187 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=da960dbd-a3c1-42d6-a366-cae860abb187 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a4c5e04434 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2976 identity=11023 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-credential-setup-nfnln subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 1c3cde42-0676-4daa-8a8a-f37405b7f098 default }" containerID=060b4777d5b631f4d8b25cdf010e6363265ac11f2364c77afae351caaef2a2a2 datapathConfiguration="&{false false false false false }" interface=lxc3ba3d0a39221 k8sPodName=openstack/keystone-db-init-lmjvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=060b4777d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-lmjvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=060b4777d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ea7e4201-b92d-4768-800a-ff31104ffae5,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ea7e4201-b92d-4768-800a-ff31104ffae5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-lmjvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ea7e4201-b92d-4768-800a-ff31104ffae5;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=ea7e4201-b92d-4768-800a-ff31104ffae5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=060b4777d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identity=27759 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ea7e4201-b92d-4768-800a-ff31104ffae5,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ea7e4201-b92d-4768-800a-ff31104ffae5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-lmjvs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=060b4777d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identity=27759 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-lmjvs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=060b4777d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=335 identity=27759 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-lmjvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=060b4777d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=335 identity=27759 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-lmjvs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=060b4777d5 endpointID=335 k8sNamespace=openstack k8sPodName=keystone-db-init-lmjvs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ea7e4201-b92d-4768-800a-ff31104ffae5 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=ea7e4201-b92d-4768-800a-ff31104ffae5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=060b4777d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=335 identity=27759 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-lmjvs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 eb3be02b-c93e-4055-a64a-e57ae2256cc7 default }" containerID=6be71249a3771e25a153cbb38b6022140b59f60dfdc7f0a24b5057d74795f444 datapathConfiguration="&{false false false false false }" interface=lxc3261f17e71e1 k8sPodName=openstack/keystone-fernet-setup-82gg5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6be71249a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-fernet-setup-82gg5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6be71249a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b215b272-c45a-4cd9-83a0-e57315c71fa0,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=b215b272-c45a-4cd9-83a0-e57315c71fa0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-fernet-setup-82gg5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b215b272-c45a-4cd9-83a0-e57315c71fa0;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=b215b272-c45a-4cd9-83a0-e57315c71fa0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6be71249a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=47004 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b215b272-c45a-4cd9-83a0-e57315c71fa0,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=b215b272-c45a-4cd9-83a0-e57315c71fa0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-fernet-setup-82gg5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6be71249a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=47004 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-fernet-setup-82gg5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6be71249a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=115 identity=47004 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-fernet-setup-82gg5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6be71249a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=115 identity=47004 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-fernet-setup-82gg5 subsys=daemon level=info msg="Delete endpoint request" containerID=6be71249a3 endpointID=115 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-82gg5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b215b272-c45a-4cd9-83a0-e57315c71fa0 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=b215b272-c45a-4cd9-83a0-e57315c71fa0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6be71249a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=115 identity=47004 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-fernet-setup-82gg5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 77f040f2-8cb8-43a3-9bd1-e2a73282df97 default }" containerID=344e04cd3c1aaf9005bf1010b648d20d1413306cd32cac7ff1c0ae056030c375 datapathConfiguration="&{false false false false false }" interface=lxc75897d45a667 k8sPodName=openstack/keystone-db-sync-vdj6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=344e04cd3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-sync-vdj6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=344e04cd3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e5a85f15-8079-4520-8f9c-290ae1e37e70,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=e5a85f15-8079-4520-8f9c-290ae1e37e70,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-sync-vdj6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e5a85f15-8079-4520-8f9c-290ae1e37e70;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=e5a85f15-8079-4520-8f9c-290ae1e37e70;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=344e04cd3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=33738 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e5a85f15-8079-4520-8f9c-290ae1e37e70,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=e5a85f15-8079-4520-8f9c-290ae1e37e70,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-sync-vdj6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=344e04cd3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=33738 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-sync-vdj6t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=344e04cd3c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=913 identity=33738 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-sync-vdj6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=344e04cd3c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=913 identity=33738 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-sync-vdj6t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=344e04cd3c endpointID=913 k8sNamespace=openstack k8sPodName=keystone-db-sync-vdj6t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e5a85f15-8079-4520-8f9c-290ae1e37e70 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=e5a85f15-8079-4520-8f9c-290ae1e37e70 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=344e04cd3c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=913 identity=33738 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-sync-vdj6t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 2b9335d5-1194-49ab-b534-8424b47b8c5f default }" containerID=49ab97906f61ebe1c83b554c4e2059ea9b61c03f746960160bd9b88a7572c45a datapathConfiguration="&{false false false false false }" interface=lxc415d168e8217 k8sPodName=openstack/keystone-rabbit-init-zdl6m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49ab97906f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-rabbit-init-zdl6m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49ab97906f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fadcb5e8-7a37-4478-acec-8afcdf5e2909,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fadcb5e8-7a37-4478-acec-8afcdf5e2909,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-rabbit-init-zdl6m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fadcb5e8-7a37-4478-acec-8afcdf5e2909;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=fadcb5e8-7a37-4478-acec-8afcdf5e2909;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49ab97906f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=61523 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fadcb5e8-7a37-4478-acec-8afcdf5e2909,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fadcb5e8-7a37-4478-acec-8afcdf5e2909,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-rabbit-init-zdl6m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49ab97906f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=61523 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-rabbit-init-zdl6m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49ab97906f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=902 identity=61523 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-rabbit-init-zdl6m subsys=endpoint level=info msg="Successful endpoint creation" containerID=49ab97906f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=902 identity=61523 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-rabbit-init-zdl6m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=49ab97906f endpointID=902 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-zdl6m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fadcb5e8-7a37-4478-acec-8afcdf5e2909 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=fadcb5e8-7a37-4478-acec-8afcdf5e2909 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=49ab97906f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=902 identity=61523 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-rabbit-init-zdl6m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 fddd6cb0-8065-406b-a510-99bb01f583ac default }" containerID=cdd240131dd242da699514cde6e768d1af753ad273094eeca7b7e620686592c8 datapathConfiguration="&{false false false false false }" interface=lxc08f0adaf6f91 k8sPodName=openstack/keystone-domain-manage-kb7vq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdd240131d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2929 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-domain-manage-kb7vq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdd240131d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2929 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0878c144-c567-45fa-90c6-00dae560a75f,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=0878c144-c567-45fa-90c6-00dae560a75f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-domain-manage-kb7vq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cdd240131d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2929 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-domain-manage-kb7vq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0878c144-c567-45fa-90c6-00dae560a75f;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=0878c144-c567-45fa-90c6-00dae560a75f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdd240131d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2929 identity=16444 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0878c144-c567-45fa-90c6-00dae560a75f,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=0878c144-c567-45fa-90c6-00dae560a75f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-domain-manage-kb7vq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdd240131d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2929 identity=16444 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-domain-manage-kb7vq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cdd240131d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2929 identity=16444 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-domain-manage-kb7vq subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdd240131d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2929 identity=16444 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-domain-manage-kb7vq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cdd240131d endpointID=2929 k8sNamespace=openstack k8sPodName=keystone-domain-manage-kb7vq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0878c144-c567-45fa-90c6-00dae560a75f k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=0878c144-c567-45fa-90c6-00dae560a75f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cdd240131d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2929 identity=16444 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-domain-manage-kb7vq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 430b2e7e-6ef0-4f1e-9c1a-97a4c720de1e default }" containerID=bca9cccf5f351f56ba4981bac5bea098758a00e4439b59ddb8b33bf59b1d4991 datapathConfiguration="&{false false false false false }" interface=lxce4e2322b755a k8sPodName=openstack/keystone-bootstrap-dkjj7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bca9cccf5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=988 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-dkjj7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bca9cccf5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=988 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bcd1b8c4-f167-450b-97e7-6d6e29d56c26,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=bcd1b8c4-f167-450b-97e7-6d6e29d56c26,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-dkjj7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bcd1b8c4-f167-450b-97e7-6d6e29d56c26;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=bcd1b8c4-f167-450b-97e7-6d6e29d56c26;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bca9cccf5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=988 identity=624 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bcd1b8c4-f167-450b-97e7-6d6e29d56c26,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=bcd1b8c4-f167-450b-97e7-6d6e29d56c26,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-dkjj7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bca9cccf5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=988 identity=624 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-dkjj7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bca9cccf5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=988 identity=624 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-dkjj7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bca9cccf5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=988 identity=624 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-dkjj7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bca9cccf5f endpointID=988 k8sNamespace=openstack k8sPodName=keystone-bootstrap-dkjj7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bcd1b8c4-f167-450b-97e7-6d6e29d56c26 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=bcd1b8c4-f167-450b-97e7-6d6e29d56c26 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bca9cccf5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=988 identity=624 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-dkjj7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 90e09be5-ee5b-4f78-9cbb-64cc475c4496 default }" containerID=598b928b38bf3141f637800cd7d3760c641ddd32758acecbf388d531ed86b512 datapathConfiguration="&{false false false false false }" interface=lxcac8c81e3624d k8sPodName=local-path-storage/helper-pod-create-pvc-609e45ed-6041-4e71-907d-bcd391876e85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=598b928b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-609e45ed-6041-4e71-907d-bcd391876e85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=598b928b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-609e45ed-6041-4e71-907d-bcd391876e85 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=598b928b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identity=3444 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-609e45ed-6041-4e71-907d-bcd391876e85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=598b928b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identity=3444 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-609e45ed-6041-4e71-907d-bcd391876e85 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=598b928b38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=197 identity=3444 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-609e45ed-6041-4e71-907d-bcd391876e85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=598b928b38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=197 identity=3444 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-609e45ed-6041-4e71-907d-bcd391876e85 subsys=daemon level=info msg="Delete endpoint request" containerID=598b928b38 endpointID=197 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-609e45ed-6041-4e71-907d-bcd391876e85 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=598b928b38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=197 identity=3444 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-609e45ed-6041-4e71-907d-bcd391876e85 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 3ad15bb8-9364-4da8-a7e2-a8fdac54e773 default }" containerID=b839bbffc553892f202f9bc6cad8b63472a6630d895bd7c36ecba07bd78a4352 datapathConfiguration="&{false false false false false }" interface=lxc30229a1e1568 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b839bbffc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b839bbffc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b839bbffc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=56007 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b839bbffc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=56007 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b839bbffc5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=331 identity=56007 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b839bbffc5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=331 identity=56007 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03503117940671203 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.48 5397cd13-59cf-40b7-a72a-25e021d48c52 default }" containerID=b09852056db37bd4e2f4187a28098a16bbda6c7271ae4bf38e8482626498dcab datapathConfiguration="&{false false false false false }" interface=lxcfabfac96f501 k8sPodName=openstack/barbican-api-5f888447-4hlhk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b09852056d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3823 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-api-5f888447-4hlhk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b09852056d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3823 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-api-5f888447-4hlhk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b09852056d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3823 identity=39964 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-api-5f888447-4hlhk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b09852056d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3823 identity=39964 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-api-5f888447-4hlhk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b09852056d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3823 identity=39964 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-api-5f888447-4hlhk subsys=endpoint level=info msg="Successful endpoint creation" containerID=b09852056d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3823 identity=39964 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-api-5f888447-4hlhk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.235 5c8410bc-0ac1-48f7-b69b-4c3cd0b855fb default }" containerID=98c44301dc17e860dd21ba93995d93f2a822d5d9eefb37118a7a155688399aa9 datapathConfiguration="&{false false false false false }" interface=lxc67210af420c3 k8sPodName=openstack/barbican-db-init-zgc6d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98c44301dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-init-zgc6d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98c44301dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=059e0114-3b55-4ad7-a1fe-b8b5d1177f3a,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=059e0114-3b55-4ad7-a1fe-b8b5d1177f3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-init-zgc6d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=059e0114-3b55-4ad7-a1fe-b8b5d1177f3a;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=059e0114-3b55-4ad7-a1fe-b8b5d1177f3a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98c44301dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identity=2134 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=059e0114-3b55-4ad7-a1fe-b8b5d1177f3a,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=059e0114-3b55-4ad7-a1fe-b8b5d1177f3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-init-zgc6d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98c44301dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identity=2134 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-init-zgc6d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98c44301dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=927 identity=2134 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-init-zgc6d subsys=endpoint level=info msg="Successful endpoint creation" containerID=98c44301dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=927 identity=2134 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-init-zgc6d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=98c44301dc endpointID=927 k8sNamespace=openstack k8sPodName=barbican-db-init-zgc6d subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=059e0114-3b55-4ad7-a1fe-b8b5d1177f3a k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=059e0114-3b55-4ad7-a1fe-b8b5d1177f3a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=98c44301dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=927 identity=2134 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-init-zgc6d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 5cb53069-5559-4d9f-b9a2-a64244bd5f72 default }" containerID=186d00a08dd9d4d5bd7b2531cfd74c4f5aa2081c60dfce25200b58b94ea73561 datapathConfiguration="&{false false false false false }" interface=lxcc47a16f28f13 k8sPodName=openstack/barbican-db-sync-654p7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=186d00a08d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3088 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-db-sync-654p7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=186d00a08d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3088 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=76f04c88-0015-4b39-8f0a-34a3f16185c2,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=76f04c88-0015-4b39-8f0a-34a3f16185c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-db-sync-654p7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=76f04c88-0015-4b39-8f0a-34a3f16185c2;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=76f04c88-0015-4b39-8f0a-34a3f16185c2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=186d00a08d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3088 identity=42834 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=76f04c88-0015-4b39-8f0a-34a3f16185c2,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=76f04c88-0015-4b39-8f0a-34a3f16185c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-db-sync-654p7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=186d00a08d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3088 identity=42834 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-db-sync-654p7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=186d00a08d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3088 identity=42834 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-db-sync-654p7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=186d00a08d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3088 identity=42834 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-db-sync-654p7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=186d00a08d endpointID=3088 k8sNamespace=openstack k8sPodName=barbican-db-sync-654p7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=76f04c88-0015-4b39-8f0a-34a3f16185c2 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=76f04c88-0015-4b39-8f0a-34a3f16185c2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=186d00a08d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3088 identity=42834 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-db-sync-654p7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 45e42b0a-ec9d-43e2-85dd-089e04c51ea6 default }" containerID=9b5b8ed7ab64f6b1327327692c4ec3f7832a656ed79f69672889d938df039597 datapathConfiguration="&{false false false false false }" interface=lxc18005854c291 k8sPodName=openstack/barbican-rabbit-init-zp6qg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b5b8ed7ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-rabbit-init-zp6qg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b5b8ed7ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b941e25d-67c1-49e5-8456-3696ade38439,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b941e25d-67c1-49e5-8456-3696ade38439,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-rabbit-init-zp6qg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b941e25d-67c1-49e5-8456-3696ade38439;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b941e25d-67c1-49e5-8456-3696ade38439;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b5b8ed7ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identity=12321 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b941e25d-67c1-49e5-8456-3696ade38439,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b941e25d-67c1-49e5-8456-3696ade38439,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-rabbit-init-zp6qg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9b5b8ed7ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identity=12321 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-rabbit-init-zp6qg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b5b8ed7ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1148 identity=12321 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-rabbit-init-zp6qg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b5b8ed7ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1148 identity=12321 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-rabbit-init-zp6qg subsys=daemon level=info msg="Delete endpoint request" containerID=9b5b8ed7ab endpointID=1148 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-zp6qg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b941e25d-67c1-49e5-8456-3696ade38439 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b941e25d-67c1-49e5-8456-3696ade38439 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9b5b8ed7ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1148 identity=12321 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-rabbit-init-zp6qg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 7500ce86-0b34-4825-b488-46d3a8e3160f default }" containerID=09a286868b2e49afe6271e3ada8c409dbb8fed315440879e085e6f5e47b377f5 datapathConfiguration="&{false false false false false }" interface=lxc629ecb57367e k8sPodName=openstack/barbican-ks-service-bzfn4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09a286868b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-service-bzfn4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09a286868b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=76a39741-460d-435b-b57b-5cb971bb5132,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=76a39741-460d-435b-b57b-5cb971bb5132,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-service-bzfn4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=76a39741-460d-435b-b57b-5cb971bb5132;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=76a39741-460d-435b-b57b-5cb971bb5132;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=09a286868b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-service-bzfn4 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=09a286868b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=2496 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=76a39741-460d-435b-b57b-5cb971bb5132,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=76a39741-460d-435b-b57b-5cb971bb5132,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-service-bzfn4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09a286868b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=2496 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-service-bzfn4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09a286868b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1767 identity=2496 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-service-bzfn4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=09a286868b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1767 identity=2496 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-service-bzfn4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=09a286868b endpointID=1767 k8sNamespace=openstack k8sPodName=barbican-ks-service-bzfn4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=76a39741-460d-435b-b57b-5cb971bb5132 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=76a39741-460d-435b-b57b-5cb971bb5132 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=09a286868b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1767 identity=2496 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-service-bzfn4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 dcf46458-7ad1-4ff6-b78b-4117db92ebf5 default }" containerID=8cb22422ed572aca1b22c8507a2499daad06108b7506db3895d174b180495e17 datapathConfiguration="&{false false false false false }" interface=lxca1032ac63c28 k8sPodName=openstack/barbican-ks-endpoints-6l556 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cb22422ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6l556 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cb22422ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=30836113-c035-471e-be5e-4635835eca2e,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=30836113-c035-471e-be5e-4635835eca2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6l556 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=30836113-c035-471e-be5e-4635835eca2e;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=30836113-c035-471e-be5e-4635835eca2e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8cb22422ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=37948 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=30836113-c035-471e-be5e-4635835eca2e,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=30836113-c035-471e-be5e-4635835eca2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6l556 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cb22422ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=37948 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6l556 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8cb22422ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=192 identity=37948 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6l556 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cb22422ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=37948 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6l556 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8cb22422ed endpointID=192 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-6l556 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=30836113-c035-471e-be5e-4635835eca2e k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=30836113-c035-471e-be5e-4635835eca2e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8cb22422ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=37948 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6l556 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 e760b3c1-50f1-4b32-801d-96604ae4124f default }" containerID=510eee2f056e29f3681e5403b9691879b0296adb75364eba185f4594059dc42b datapathConfiguration="&{false false false false false }" interface=lxcd783e5dd90a6 k8sPodName=openstack/barbican-ks-user-d7jl5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=510eee2f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-user-d7jl5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=510eee2f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=02fa23f7-147f-48e3-91b0-9043a3685f0d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=02fa23f7-147f-48e3-91b0-9043a3685f0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-user-d7jl5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=510eee2f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-user-d7jl5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=02fa23f7-147f-48e3-91b0-9043a3685f0d;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=02fa23f7-147f-48e3-91b0-9043a3685f0d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=510eee2f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=42434 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=02fa23f7-147f-48e3-91b0-9043a3685f0d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=02fa23f7-147f-48e3-91b0-9043a3685f0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-user-d7jl5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=510eee2f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=42434 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-user-d7jl5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=510eee2f05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1767 identity=42434 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-user-d7jl5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=510eee2f05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1767 identity=42434 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-user-d7jl5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=510eee2f05 endpointID=1767 k8sNamespace=openstack k8sPodName=barbican-ks-user-d7jl5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=02fa23f7-147f-48e3-91b0-9043a3685f0d k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=02fa23f7-147f-48e3-91b0-9043a3685f0d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=510eee2f05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1767 identity=42434 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-ks-user-d7jl5 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.4 cd88df11-1501-4dbb-bddf-0941c1264f47 default }" containerID=c7a00ba50bf6b407eee282961f078f7ff81dea0c6a32cd33f35a39d1390fe05d datapathConfiguration="&{false false false false false }" interface=lxc3157c3b2cb7a k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-vbbj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7a00ba50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 ipv4=10.0.0.4 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-vbbj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7a00ba50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.4 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-vbbj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7a00ba50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=45253 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.4 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-vbbj6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7a00ba50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=45253 ipv4=10.0.0.4 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-vbbj6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c7a00ba50b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1267 identity=45253 ipv4=10.0.0.4 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-vbbj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7a00ba50b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1267 identity=45253 ipv4=10.0.0.4 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-vbbj6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.69 9cc40bdf-6758-43be-a7a1-2a79400ec000 default }" containerID=273e963ea98a27b05044f41981e175d8172e8f44e614fc24aa2747326dc2e581 datapathConfiguration="&{false false false false false }" interface=lxcf5a3af6eb741 k8sPodName=openstack/rook-ceph-detect-version-tbfw5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=273e963ea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3582 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tbfw5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=273e963ea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3582 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=70602944-bf39-42e3-bee2-7126d317be4b,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=70602944-bf39-42e3-bee2-7126d317be4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tbfw5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=70602944-bf39-42e3-bee2-7126d317be4b;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=70602944-bf39-42e3-bee2-7126d317be4b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=273e963ea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3582 identity=56876 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=70602944-bf39-42e3-bee2-7126d317be4b,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=70602944-bf39-42e3-bee2-7126d317be4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tbfw5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=273e963ea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3582 identity=56876 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tbfw5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=273e963ea9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3582 identity=56876 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tbfw5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=273e963ea9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3582 identity=56876 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tbfw5 subsys=daemon level=info msg="Delete endpoint request" containerID=273e963ea9 endpointID=3582 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-tbfw5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=70602944-bf39-42e3-bee2-7126d317be4b k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=70602944-bf39-42e3-bee2-7126d317be4b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=273e963ea9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3582 identity=56876 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tbfw5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 6d1ae8c3-d31e-4720-97bd-d83cc8efa701 default }" containerID=52a20adf6a735f9ccb9bacb2d26c7169cc0c104a96d4d2c779051f17291d3b97 datapathConfiguration="&{false false false false false }" interface=lxc9451e67f0444 k8sPodName=openstack/ceph-object-controller-detect-version-szgtb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52a20adf6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-szgtb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52a20adf6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0ec8622f-6b6a-4d42-93b1-f1c3be23b941,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0ec8622f-6b6a-4d42-93b1-f1c3be23b941,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-szgtb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=52a20adf6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-szgtb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=0ec8622f-6b6a-4d42-93b1-f1c3be23b941;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=0ec8622f-6b6a-4d42-93b1-f1c3be23b941;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52a20adf6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=63283 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0ec8622f-6b6a-4d42-93b1-f1c3be23b941,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0ec8622f-6b6a-4d42-93b1-f1c3be23b941,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-szgtb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52a20adf6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=63283 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-szgtb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52a20adf6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=229 identity=63283 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-szgtb subsys=endpoint level=info msg="Successful endpoint creation" containerID=52a20adf6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=229 identity=63283 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-szgtb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=52a20adf6a endpointID=229 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-szgtb subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=0ec8622f-6b6a-4d42-93b1-f1c3be23b941 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=0ec8622f-6b6a-4d42-93b1-f1c3be23b941 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=52a20adf6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=229 identity=63283 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-szgtb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 9d211832-967d-4084-9bff-45cb15eeb642 default }" containerID=9f5071d6523851a9840171999f79a63a25e8be805c0f48ccfa11c15569a9fc18 datapathConfiguration="&{false false false false false }" interface=lxc2d4c4cac740f k8sPodName=local-path-storage/helper-pod-create-pvc-05af56a0-29d9-4b52-a591-22499bda9d15 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f5071d652 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05af56a0-29d9-4b52-a591-22499bda9d15 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f5071d652 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05af56a0-29d9-4b52-a591-22499bda9d15 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f5071d652 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=3444 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05af56a0-29d9-4b52-a591-22499bda9d15 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f5071d652 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=3444 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05af56a0-29d9-4b52-a591-22499bda9d15 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f5071d652 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=975 identity=3444 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05af56a0-29d9-4b52-a591-22499bda9d15 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f5071d652 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=975 identity=3444 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05af56a0-29d9-4b52-a591-22499bda9d15 subsys=daemon level=info msg="Delete endpoint request" containerID=9f5071d652 endpointID=975 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-05af56a0-29d9-4b52-a591-22499bda9d15 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9f5071d652 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=975 identity=3444 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05af56a0-29d9-4b52-a591-22499bda9d15 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 39977506-4217-442e-99e8-e587d5227f77 default }" containerID=68e1d5b73ab0582bc668ca93e04b1f6b5fff1b0b5c5bc3ed745e9c84c5cc5376 datapathConfiguration="&{false false false false false }" interface=lxcc1499f064ad1 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68e1d5b73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3459 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68e1d5b73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3459 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68e1d5b73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3459 identity=5330 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68e1d5b73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3459 identity=5330 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68e1d5b73a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3459 identity=5330 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68e1d5b73a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3459 identity=5330 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.72 39a53cca-563d-434f-9e98-47e0b203846f default }" containerID=57f306754a3798c2bfc8b43ee3f639f6debc8b3fbfffcfd289ac1da407394af6 datapathConfiguration="&{false false false false false }" interface=lxc08a9fdf29223 k8sPodName=openstack/glance-db-init-lx6lc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57f306754a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-db-init-lx6lc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57f306754a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1ae1ade6-b752-4e84-a5d8-3b3a5146157d,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=1ae1ade6-b752-4e84-a5d8-3b3a5146157d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-db-init-lx6lc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1ae1ade6-b752-4e84-a5d8-3b3a5146157d;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=1ae1ade6-b752-4e84-a5d8-3b3a5146157d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57f306754a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identity=19878 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1ae1ade6-b752-4e84-a5d8-3b3a5146157d,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=1ae1ade6-b752-4e84-a5d8-3b3a5146157d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-db-init-lx6lc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57f306754a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identity=19878 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-db-init-lx6lc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57f306754a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=266 identity=19878 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-db-init-lx6lc subsys=endpoint level=info msg="Successful endpoint creation" containerID=57f306754a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=266 identity=19878 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-db-init-lx6lc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.78 2f3b3486-d2de-44fd-baf7-b0c691397970 default }" containerID=065e977ce1c4a0e8693fd2320d2268cb1e20d3d097621ae1d7ee29c09a2439cc datapathConfiguration="&{false false false false false }" interface=lxc8b42f1e0023c k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-qns5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=065e977ce1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-qns5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=065e977ce1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-qns5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=065e977ce1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=22767 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-qns5d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=065e977ce1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=22767 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-qns5d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 1a2aa92e-494b-43f0-b80f-efe0b470c438 default }" containerID=1f254412d60bad859ae3335800f44f72a1bba6d608e745d219bef8b39724a9be datapathConfiguration="&{false false false false false }" interface=lxc5676d41b70a7 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vzj8q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f254412d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vzj8q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f254412d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vzj8q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f254412d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identity=38479 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vzj8q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f254412d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identity=38479 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vzj8q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=065e977ce1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=563 identity=22767 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-qns5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=065e977ce1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=563 identity=22767 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-qns5d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1f254412d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1277 identity=38479 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vzj8q subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f254412d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1277 identity=38479 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vzj8q subsys=daemon level=info msg="Delete endpoint request" containerID=57f306754a endpointID=266 k8sNamespace=openstack k8sPodName=glance-db-init-lx6lc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1ae1ade6-b752-4e84-a5d8-3b3a5146157d k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=1ae1ade6-b752-4e84-a5d8-3b3a5146157d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=57f306754a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=266 identity=19878 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-db-init-lx6lc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.117 eefd1692-5e80-4aa0-beef-76546067ccc9 default }" containerID=579b8b57c59ef093926187f92973c589eeb1d5d21fe1dc3cc050a9272bc3d33c datapathConfiguration="&{false false false false false }" interface=lxc9f255ef38cde k8sPodName=openstack/glance-db-sync-2bt45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=579b8b57c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-db-sync-2bt45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=579b8b57c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1ed1dcfb-3688-4ac5-8ca9-6cbe066b1dcc,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=1ed1dcfb-3688-4ac5-8ca9-6cbe066b1dcc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-db-sync-2bt45 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1ed1dcfb-3688-4ac5-8ca9-6cbe066b1dcc;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=1ed1dcfb-3688-4ac5-8ca9-6cbe066b1dcc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=579b8b57c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 identity=12233 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1ed1dcfb-3688-4ac5-8ca9-6cbe066b1dcc,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=1ed1dcfb-3688-4ac5-8ca9-6cbe066b1dcc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-db-sync-2bt45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=579b8b57c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 identity=12233 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-db-sync-2bt45 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=579b8b57c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2404 identity=12233 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-db-sync-2bt45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=579b8b57c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2404 identity=12233 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-db-sync-2bt45 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=579b8b57c5 endpointID=2404 k8sNamespace=openstack k8sPodName=glance-db-sync-2bt45 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1ed1dcfb-3688-4ac5-8ca9-6cbe066b1dcc k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=1ed1dcfb-3688-4ac5-8ca9-6cbe066b1dcc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=579b8b57c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2404 identity=12233 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-db-sync-2bt45 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 cf2193da-80e2-41d1-abe4-0bca5b269083 default }" containerID=aefab89d3f3539d18e4c5a8dc41543a641f5f962ce026df57058b74fcd3e83fc datapathConfiguration="&{false false false false false }" interface=lxced3894011ac2 k8sPodName=openstack/glance-rabbit-init-mwdd8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aefab89d3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-mwdd8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aefab89d3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=28a17363-9ce3-4aa3-a0ec-6d5b11127baf,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=28a17363-9ce3-4aa3-a0ec-6d5b11127baf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-mwdd8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=28a17363-9ce3-4aa3-a0ec-6d5b11127baf;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=28a17363-9ce3-4aa3-a0ec-6d5b11127baf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aefab89d3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identity=2356 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=28a17363-9ce3-4aa3-a0ec-6d5b11127baf,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=28a17363-9ce3-4aa3-a0ec-6d5b11127baf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-mwdd8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aefab89d3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identity=2356 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-mwdd8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aefab89d3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=220 identity=2356 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-mwdd8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aefab89d3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=220 identity=2356 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-mwdd8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aefab89d3f endpointID=220 k8sNamespace=openstack k8sPodName=glance-rabbit-init-mwdd8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=28a17363-9ce3-4aa3-a0ec-6d5b11127baf k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=28a17363-9ce3-4aa3-a0ec-6d5b11127baf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=aefab89d3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=220 identity=2356 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-rabbit-init-mwdd8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 f50bbf9f-9872-4ed3-8bec-390dbf614b55 default }" containerID=4f4207093ef4afb0b6cb3ef3382ceb124e115f3e44e40689b67305ef08d38e42 datapathConfiguration="&{false false false false false }" interface=lxc6b9293eeb914 k8sPodName=openstack/glance-ks-service-c99cz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f4207093e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-c99cz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f4207093e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bf390b7f-2a8c-41ba-95b0-f04f06d5d096,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=bf390b7f-2a8c-41ba-95b0-f04f06d5d096,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-c99cz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bf390b7f-2a8c-41ba-95b0-f04f06d5d096;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=bf390b7f-2a8c-41ba-95b0-f04f06d5d096;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4f4207093e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=23109 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bf390b7f-2a8c-41ba-95b0-f04f06d5d096,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=bf390b7f-2a8c-41ba-95b0-f04f06d5d096,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-c99cz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f4207093e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=23109 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-c99cz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f4207093e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=169 identity=23109 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-c99cz subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f4207093e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=169 identity=23109 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-c99cz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4f4207093e endpointID=169 k8sNamespace=openstack k8sPodName=glance-ks-service-c99cz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bf390b7f-2a8c-41ba-95b0-f04f06d5d096 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=bf390b7f-2a8c-41ba-95b0-f04f06d5d096 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4f4207093e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=169 identity=23109 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-c99cz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 fc29d69e-928b-4529-b736-39ce8bde056b default }" containerID=a52dfabada6c3a6be1269b92063bf2e2394d2171656e0ed7b323780c99c718ce datapathConfiguration="&{false false false false false }" interface=lxcc18f35cc8e0c k8sPodName=openstack/glance-ks-endpoints-ltnns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a52dfabada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-ltnns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a52dfabada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3899d44a-14a2-4059-ab0f-279da61a2914,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3899d44a-14a2-4059-ab0f-279da61a2914,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-ltnns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3899d44a-14a2-4059-ab0f-279da61a2914;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3899d44a-14a2-4059-ab0f-279da61a2914;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a52dfabada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 identity=17023 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3899d44a-14a2-4059-ab0f-279da61a2914,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3899d44a-14a2-4059-ab0f-279da61a2914,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-ltnns oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a52dfabada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 identity=17023 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-ltnns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a52dfabada datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1530 identity=17023 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-ltnns subsys=endpoint level=info msg="Successful endpoint creation" containerID=a52dfabada datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1530 identity=17023 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-ltnns subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a52dfabada endpointID=1530 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-ltnns subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3899d44a-14a2-4059-ab0f-279da61a2914 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3899d44a-14a2-4059-ab0f-279da61a2914 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a52dfabada datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1530 identity=17023 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-ltnns subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 087fab17-d264-4de6-a90a-92bbc12e90d1 default }" containerID=8de13e895e1fd5c92438906de89fc9a60f91dc72f32e2e822ef20137dfc3544c datapathConfiguration="&{false false false false false }" interface=lxc1e5d001a5e26 k8sPodName=openstack/glance-ks-user-9srbt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8de13e895e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-9srbt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8de13e895e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=892ba093-648e-407d-8426-f6576fcb2949,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=892ba093-648e-407d-8426-f6576fcb2949,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-9srbt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8de13e895e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-9srbt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=892ba093-648e-407d-8426-f6576fcb2949;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=892ba093-648e-407d-8426-f6576fcb2949;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8de13e895e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identity=10639 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=892ba093-648e-407d-8426-f6576fcb2949,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=892ba093-648e-407d-8426-f6576fcb2949,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-9srbt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8de13e895e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identity=10639 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-9srbt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8de13e895e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3736 identity=10639 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-9srbt subsys=endpoint level=info msg="Successful endpoint creation" containerID=8de13e895e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3736 identity=10639 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-9srbt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8de13e895e endpointID=3736 k8sNamespace=openstack k8sPodName=glance-ks-user-9srbt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=892ba093-648e-407d-8426-f6576fcb2949 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=892ba093-648e-407d-8426-f6576fcb2949 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8de13e895e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3736 identity=10639 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-9srbt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 d787cc21-97c2-4b3f-8cef-a2dd7e01a733 default }" containerID=1f17a59d39121587190e5461d9e9aae8bd2490d8d76b3ce20507ab90c2e28fd5 datapathConfiguration="&{false false false false false }" interface=lxc3834c697718e k8sPodName=openstack/glance-metadefs-load-zq624 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f17a59d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-metadefs-load-zq624 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f17a59d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=733619f7-0658-42fa-825e-d5e7aced536e,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=733619f7-0658-42fa-825e-d5e7aced536e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-metadefs-load-zq624 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1f17a59d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-metadefs-load-zq624 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=733619f7-0658-42fa-825e-d5e7aced536e;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=733619f7-0658-42fa-825e-d5e7aced536e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f17a59d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identity=2113 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=733619f7-0658-42fa-825e-d5e7aced536e,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=733619f7-0658-42fa-825e-d5e7aced536e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-metadefs-load-zq624 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f17a59d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identity=2113 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-metadefs-load-zq624 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f17a59d39 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1011 identity=2113 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-metadefs-load-zq624 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f17a59d39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1011 identity=2113 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-metadefs-load-zq624 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1f17a59d39 endpointID=1011 k8sNamespace=openstack k8sPodName=glance-metadefs-load-zq624 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=733619f7-0658-42fa-825e-d5e7aced536e k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=733619f7-0658-42fa-825e-d5e7aced536e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1f17a59d39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1011 identity=2113 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-metadefs-load-zq624 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 23d68f24-ee49-4a8c-8bc5-6e50d0dcf0a5 default }" containerID=9487430449c85f1b5d7ce0505b36eba5255be75953e7e5cc167824947178f2fe datapathConfiguration="&{false false false false false }" interface=lxc1e01258cec1a k8sPodName=openstack/glance-storage-init-2dmtn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9487430449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-2dmtn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9487430449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=18e24cec-54f8-49db-a4aa-f3098a472bc1,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=18e24cec-54f8-49db-a4aa-f3098a472bc1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-2dmtn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9487430449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-2dmtn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=18e24cec-54f8-49db-a4aa-f3098a472bc1;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=18e24cec-54f8-49db-a4aa-f3098a472bc1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9487430449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 identity=4522 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=18e24cec-54f8-49db-a4aa-f3098a472bc1,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=18e24cec-54f8-49db-a4aa-f3098a472bc1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-2dmtn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9487430449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 identity=4522 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-2dmtn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9487430449 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3921 identity=4522 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-2dmtn subsys=endpoint level=info msg="Successful endpoint creation" containerID=9487430449 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3921 identity=4522 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-2dmtn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9487430449 endpointID=3921 k8sNamespace=openstack k8sPodName=glance-storage-init-2dmtn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=18e24cec-54f8-49db-a4aa-f3098a472bc1 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=18e24cec-54f8-49db-a4aa-f3098a472bc1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9487430449 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3921 identity=4522 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-storage-init-2dmtn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 4d601d67-8a3d-4fbd-baa7-f2d29da9a097 default }" containerID=fcc64402efb9e44863c7afbb04caab65a9ddaee952ec42e6ae52881cac7994a5 datapathConfiguration="&{false false false false false }" interface=lxc367c93849f7c k8sPodName=openstack/glance-api-747845895f-xk46w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcc64402ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2537 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-747845895f-xk46w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcc64402ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2537 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-747845895f-xk46w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fcc64402ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2537 identity=9760 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-747845895f-xk46w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fcc64402ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2537 identity=9760 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-747845895f-xk46w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fcc64402ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2537 identity=9760 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-747845895f-xk46w subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcc64402ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2537 identity=9760 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-747845895f-xk46w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 db00d820-9dca-48b9-9778-1f68897eaace default }" containerID=e7b34b09a886824998f2ca8c93b734b25fbeb2ed5fcf12b2d1893e34baafa2fa datapathConfiguration="&{false false false false false }" interface=lxcb664ca3062c1 k8sPodName=openstack/staffeln-conductor-6cff74f8cd-2fbs6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7b34b09a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3939 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-conductor-6cff74f8cd-2fbs6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7b34b09a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3939 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-conductor-6cff74f8cd-2fbs6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.114 b24c0b32-fe7a-4fc9-8533-b23d19be4667 default }" containerID=a3b8f9b3f823b0e6432f449ee05196ec68b7b77e70b09d0ca77f8da49e0eaae0 datapathConfiguration="&{false false false false false }" interface=lxce4ca5509d015 k8sPodName=openstack/staffeln-api-7c69b668d9-q4fgd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3b8f9b3f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1303 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-api-7c69b668d9-q4fgd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3b8f9b3f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1303 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-api-7c69b668d9-q4fgd subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e7b34b09a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3939 identity=4213 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-conductor-6cff74f8cd-2fbs6 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=e7b34b09a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3939 identity=4213 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-conductor-6cff74f8cd-2fbs6 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=a3b8f9b3f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1303 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-api-7c69b668d9-q4fgd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3b8f9b3f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1303 identity=9591 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-api-7c69b668d9-q4fgd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3b8f9b3f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1303 identity=9591 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-api-7c69b668d9-q4fgd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 926035b1-8f87-4949-bc46-f9d3a5a5c813 default }" containerID=4e3cec04a65217286a781874d5793dc5960e36ba5ba41c91b08bc2f37f498aaf datapathConfiguration="&{false false false false false }" interface=lxcc916916645fb k8sPodName=openstack/staffeln-db-init-brlwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e3cec04a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-init-brlwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e3cec04a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=37728a2b-bf03-4040-aa6c-f7c246b800c2,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=37728a2b-bf03-4040-aa6c-f7c246b800c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-init-brlwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=37728a2b-bf03-4040-aa6c-f7c246b800c2;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=37728a2b-bf03-4040-aa6c-f7c246b800c2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e3cec04a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identity=356 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=37728a2b-bf03-4040-aa6c-f7c246b800c2,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=37728a2b-bf03-4040-aa6c-f7c246b800c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-init-brlwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e3cec04a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identity=356 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-init-brlwp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7b34b09a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3939 identity=4213 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-conductor-6cff74f8cd-2fbs6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7b34b09a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3939 identity=4213 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-conductor-6cff74f8cd-2fbs6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a3b8f9b3f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1303 identity=9591 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-api-7c69b668d9-q4fgd subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3b8f9b3f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1303 identity=9591 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-api-7c69b668d9-q4fgd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4e3cec04a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1628 identity=356 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-init-brlwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e3cec04a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1628 identity=356 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-init-brlwp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e3cec04a6 endpointID=1628 k8sNamespace=openstack k8sPodName=staffeln-db-init-brlwp subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=37728a2b-bf03-4040-aa6c-f7c246b800c2 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=37728a2b-bf03-4040-aa6c-f7c246b800c2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=4e3cec04a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1628 identity=356 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-init-brlwp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 94b471c3-99ae-44cb-ae21-39d144a64b78 default }" containerID=d57c6406a7d3ccd00fb89762fe20af70c7d3af0ada720b94708cd4f190ec911a datapathConfiguration="&{false false false false false }" interface=lxcfad9f62dec6e k8sPodName=openstack/staffeln-db-sync-9bb65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d57c6406a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-sync-9bb65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d57c6406a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3a9ec8b9-a691-435d-844f-0e37c7f0d669,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=3a9ec8b9-a691-435d-844f-0e37c7f0d669,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-sync-9bb65 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=3a9ec8b9-a691-435d-844f-0e37c7f0d669;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=3a9ec8b9-a691-435d-844f-0e37c7f0d669;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d57c6406a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=65023 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3a9ec8b9-a691-435d-844f-0e37c7f0d669,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=3a9ec8b9-a691-435d-844f-0e37c7f0d669,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-sync-9bb65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d57c6406a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=65023 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-sync-9bb65 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d57c6406a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=140 identity=65023 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-sync-9bb65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d57c6406a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=140 identity=65023 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-sync-9bb65 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d57c6406a7 endpointID=140 k8sNamespace=openstack k8sPodName=staffeln-db-sync-9bb65 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=3a9ec8b9-a691-435d-844f-0e37c7f0d669 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=3a9ec8b9-a691-435d-844f-0e37c7f0d669 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=d57c6406a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=140 identity=65023 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-sync-9bb65 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 984ca88a-56da-492a-af24-ca847ddb16c2 default }" containerID=9ec1f072af8648d2f0db66ebe5d3953e9a7f96123a21c7a87851a48cee9d7e4b datapathConfiguration="&{false false false false false }" interface=lxca2d50d238a6d k8sPodName=local-path-storage/helper-pod-create-pvc-6053939f-1b2b-4c3b-8a50-3d73c5453551 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ec1f072af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6053939f-1b2b-4c3b-8a50-3d73c5453551 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ec1f072af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6053939f-1b2b-4c3b-8a50-3d73c5453551 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ec1f072af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 identity=3444 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6053939f-1b2b-4c3b-8a50-3d73c5453551 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ec1f072af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 identity=3444 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6053939f-1b2b-4c3b-8a50-3d73c5453551 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ec1f072af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3530 identity=3444 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6053939f-1b2b-4c3b-8a50-3d73c5453551 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ec1f072af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3530 identity=3444 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6053939f-1b2b-4c3b-8a50-3d73c5453551 subsys=daemon level=info msg="Delete endpoint request" containerID=9ec1f072af endpointID=3530 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6053939f-1b2b-4c3b-8a50-3d73c5453551 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9ec1f072af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3530 identity=3444 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6053939f-1b2b-4c3b-8a50-3d73c5453551 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 9d611c67-9e1f-4787-8065-69349b4ba8f1 default }" containerID=149b1c273c43d0e07478e53bbe9f46a287bc9b24e9a8d9b49136d4da5766470b datapathConfiguration="&{false false false false false }" interface=lxc446dfb3f4d2c k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=149b1c273c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=149b1c273c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=149b1c273c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identity=31713 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=149b1c273c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identity=31713 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=149b1c273c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1076 identity=31713 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=149b1c273c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1076 identity=31713 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 9ba3a7c6-122b-4acd-ba49-58f6d46d898a default }" containerID=e4a4420da0f4a4aa57742005ffc451c10a5cac27174d8ee4b0213ddde1c06379 datapathConfiguration="&{false false false false false }" interface=lxc26a895032436 k8sPodName=openstack/cinder-scheduler-6b5c8747c8-fg9gq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4a4420da0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-scheduler-6b5c8747c8-fg9gq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4a4420da0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-scheduler-6b5c8747c8-fg9gq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4a4420da0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=48300 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-scheduler-6b5c8747c8-fg9gq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4a4420da0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=48300 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-scheduler-6b5c8747c8-fg9gq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 641a9ef0-b13e-43f6-9982-d92c6117c72b default }" containerID=bb7bbd5329ab50f3bd6cf600e7e0ddfc4ab2d4798f7d43d8a552ca555155d1a8 datapathConfiguration="&{false false false false false }" interface=lxc6b9772be413e k8sPodName=openstack/cinder-api-f87489b6b-bvr7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb7bbd5329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/cinder-api-f87489b6b-bvr7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb7bbd5329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/cinder-api-f87489b6b-bvr7h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb7bbd5329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=53699 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/cinder-api-f87489b6b-bvr7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb7bbd5329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=53699 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/cinder-api-f87489b6b-bvr7h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 10b5dede-01f0-4e26-860c-0ba7ddb1d76c default }" containerID=d6f397e231eba3b41c0196c7d5cf3569be6ee3818a0c14a55d1031384e4285cc datapathConfiguration="&{false false false false false }" interface=lxc2f04a1a288c3 k8sPodName=openstack/cinder-db-init-pqwxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6f397e231 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-init-pqwxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6f397e231 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c202a292-57f5-4cce-87a5-258a2230a383,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=c202a292-57f5-4cce-87a5-258a2230a383,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-init-pqwxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c202a292-57f5-4cce-87a5-258a2230a383;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=c202a292-57f5-4cce-87a5-258a2230a383;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6f397e231 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identity=31529 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c202a292-57f5-4cce-87a5-258a2230a383,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=c202a292-57f5-4cce-87a5-258a2230a383,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-init-pqwxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6f397e231 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identity=31529 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-init-pqwxw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4a4420da0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1197 identity=48300 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-scheduler-6b5c8747c8-fg9gq subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4a4420da0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1197 identity=48300 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-scheduler-6b5c8747c8-fg9gq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bb7bbd5329 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=472 identity=53699 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/cinder-api-f87489b6b-bvr7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb7bbd5329 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=472 identity=53699 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/cinder-api-f87489b6b-bvr7h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d6f397e231 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2245 identity=31529 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-init-pqwxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6f397e231 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2245 identity=31529 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-init-pqwxw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d6f397e231 endpointID=2245 k8sNamespace=openstack k8sPodName=cinder-db-init-pqwxw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c202a292-57f5-4cce-87a5-258a2230a383 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=c202a292-57f5-4cce-87a5-258a2230a383 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d6f397e231 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2245 identity=31529 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-init-pqwxw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 7b758e74-e9cb-48d9-ab92-34ed03498c0e default }" containerID=6cb7daaf7a4a5dbdb06e9571c65c2d363cc2f29e24a46c2454129faad387e5df datapathConfiguration="&{false false false false false }" interface=lxc48fc9c792ce5 k8sPodName=openstack/cinder-db-sync-zcbtj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cb7daaf7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-db-sync-zcbtj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cb7daaf7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9562828d-dcd1-472f-aff1-37daae8ed6ef,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=9562828d-dcd1-472f-aff1-37daae8ed6ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-db-sync-zcbtj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9562828d-dcd1-472f-aff1-37daae8ed6ef;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=9562828d-dcd1-472f-aff1-37daae8ed6ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6cb7daaf7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-db-sync-zcbtj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6cb7daaf7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identity=26637 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9562828d-dcd1-472f-aff1-37daae8ed6ef,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=9562828d-dcd1-472f-aff1-37daae8ed6ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-db-sync-zcbtj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cb7daaf7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identity=26637 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-db-sync-zcbtj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6cb7daaf7a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=951 identity=26637 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-db-sync-zcbtj subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cb7daaf7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=951 identity=26637 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-db-sync-zcbtj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6cb7daaf7a endpointID=951 k8sNamespace=openstack k8sPodName=cinder-db-sync-zcbtj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9562828d-dcd1-472f-aff1-37daae8ed6ef k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=9562828d-dcd1-472f-aff1-37daae8ed6ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=6cb7daaf7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=951 identity=26637 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-db-sync-zcbtj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 5e1d4c8a-f3fa-4693-959d-8eba57d2f6c4 default }" containerID=f9f8ad9f05e80d8e339eebedfe2b0bcdde1479a482f7fbb10220f90c166b7545 datapathConfiguration="&{false false false false false }" interface=lxc760260502798 k8sPodName=openstack/cinder-rabbit-init-jll9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9f8ad9f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/cinder-rabbit-init-jll9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9f8ad9f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d67c1526-4882-4f56-823d-199637458177,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d67c1526-4882-4f56-823d-199637458177,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/cinder-rabbit-init-jll9x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d67c1526-4882-4f56-823d-199637458177;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d67c1526-4882-4f56-823d-199637458177;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f9f8ad9f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identity=49143 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d67c1526-4882-4f56-823d-199637458177,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d67c1526-4882-4f56-823d-199637458177,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/cinder-rabbit-init-jll9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9f8ad9f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identity=49143 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/cinder-rabbit-init-jll9x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9f8ad9f05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=161 identity=49143 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/cinder-rabbit-init-jll9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9f8ad9f05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=161 identity=49143 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/cinder-rabbit-init-jll9x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f9f8ad9f05 endpointID=161 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-jll9x subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d67c1526-4882-4f56-823d-199637458177 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d67c1526-4882-4f56-823d-199637458177 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f9f8ad9f05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=161 identity=49143 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/cinder-rabbit-init-jll9x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 6749cfb0-43e5-4b08-b945-87e8bf4a0fe4 default }" containerID=fe9b9aafe67032040edd36bb11d84ea74aef5394e2e0b6c620f32ecd0b489297 datapathConfiguration="&{false false false false false }" interface=lxc32963069090a k8sPodName=openstack/cinder-ks-service-km9rx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe9b9aafe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-ks-service-km9rx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe9b9aafe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=474cedf3-34b3-4d25-b311-2d716bffde89,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=474cedf3-34b3-4d25-b311-2d716bffde89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-ks-service-km9rx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=474cedf3-34b3-4d25-b311-2d716bffde89;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=474cedf3-34b3-4d25-b311-2d716bffde89;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe9b9aafe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=11869 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=474cedf3-34b3-4d25-b311-2d716bffde89,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=474cedf3-34b3-4d25-b311-2d716bffde89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-ks-service-km9rx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe9b9aafe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=11869 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-ks-service-km9rx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fe9b9aafe6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=56 identity=11869 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-ks-service-km9rx subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe9b9aafe6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=56 identity=11869 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-ks-service-km9rx subsys=daemon level=info msg="Delete endpoint request" containerID=fe9b9aafe6 endpointID=56 k8sNamespace=openstack k8sPodName=cinder-ks-service-km9rx subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=474cedf3-34b3-4d25-b311-2d716bffde89 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=474cedf3-34b3-4d25-b311-2d716bffde89 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=fe9b9aafe6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=56 identity=11869 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/cinder-ks-service-km9rx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 566c1b4e-26c9-4a11-8113-f71cb2ab0344 default }" containerID=fb34600b5d9f7cea5965a7b8bd9149cfe72a7be3f788544233bf5e59af698d26 datapathConfiguration="&{false false false false false }" interface=lxc75471ae852f7 k8sPodName=openstack/cinder-ks-endpoints-pzcvn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb34600b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/cinder-ks-endpoints-pzcvn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb34600b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=883f3a06-1356-442d-95e9-59fed42ddd3b,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=883f3a06-1356-442d-95e9-59fed42ddd3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/cinder-ks-endpoints-pzcvn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=883f3a06-1356-442d-95e9-59fed42ddd3b;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=883f3a06-1356-442d-95e9-59fed42ddd3b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb34600b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=33447 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=883f3a06-1356-442d-95e9-59fed42ddd3b,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=883f3a06-1356-442d-95e9-59fed42ddd3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/cinder-ks-endpoints-pzcvn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fb34600b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=33447 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/cinder-ks-endpoints-pzcvn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb34600b5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=838 identity=33447 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/cinder-ks-endpoints-pzcvn subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb34600b5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=838 identity=33447 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/cinder-ks-endpoints-pzcvn subsys=daemon level=info msg="Delete endpoint request" containerID=fb34600b5d endpointID=838 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-pzcvn subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=883f3a06-1356-442d-95e9-59fed42ddd3b k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=883f3a06-1356-442d-95e9-59fed42ddd3b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=fb34600b5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=838 identity=33447 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/cinder-ks-endpoints-pzcvn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 88fc226b-5dd4-476e-85d4-26b5bb8ad1d2 default }" containerID=ea68ea5d3fb788544e9d9927b6f4a0bcf09df9108093e47e9d6911273d5a4e05 datapathConfiguration="&{false false false false false }" interface=lxc7ba4f5b19340 k8sPodName=openstack/cinder-ks-user-m4j7w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea68ea5d3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-ks-user-m4j7w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea68ea5d3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f7964a2b-cc44-4d14-83dd-4e8e674f43bf,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=f7964a2b-cc44-4d14-83dd-4e8e674f43bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-ks-user-m4j7w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=f7964a2b-cc44-4d14-83dd-4e8e674f43bf;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=f7964a2b-cc44-4d14-83dd-4e8e674f43bf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea68ea5d3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=17504 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f7964a2b-cc44-4d14-83dd-4e8e674f43bf,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=f7964a2b-cc44-4d14-83dd-4e8e674f43bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-ks-user-m4j7w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea68ea5d3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=17504 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-ks-user-m4j7w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ea68ea5d3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=405 identity=17504 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-ks-user-m4j7w subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea68ea5d3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=405 identity=17504 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-ks-user-m4j7w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea68ea5d3f endpointID=405 k8sNamespace=openstack k8sPodName=cinder-ks-user-m4j7w subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=f7964a2b-cc44-4d14-83dd-4e8e674f43bf k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=f7964a2b-cc44-4d14-83dd-4e8e674f43bf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=ea68ea5d3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=405 identity=17504 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-ks-user-m4j7w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 7d8e5f01-79d2-47c2-affe-119cd9df7004 default }" containerID=58d3d23f611124d580f974dcb3a1f2f8b43bea8759ba9d2ca573e7684e37cf54 datapathConfiguration="&{false false false false false }" interface=lxcaa05d4ae21e1 k8sPodName=openstack/cinder-backup-storage-init-chlhd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58d3d23f61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/cinder-backup-storage-init-chlhd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58d3d23f61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9694cb0c-43a1-496b-889f-be5b3518a909,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=9694cb0c-43a1-496b-889f-be5b3518a909,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/cinder-backup-storage-init-chlhd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=58d3d23f61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=openstack/cinder-backup-storage-init-chlhd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9694cb0c-43a1-496b-889f-be5b3518a909;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=9694cb0c-43a1-496b-889f-be5b3518a909;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58d3d23f61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 identity=877 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9694cb0c-43a1-496b-889f-be5b3518a909,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=9694cb0c-43a1-496b-889f-be5b3518a909,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/cinder-backup-storage-init-chlhd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58d3d23f61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 identity=877 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/cinder-backup-storage-init-chlhd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58d3d23f61 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1664 identity=877 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/cinder-backup-storage-init-chlhd subsys=endpoint level=info msg="Successful endpoint creation" containerID=58d3d23f61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1664 identity=877 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/cinder-backup-storage-init-chlhd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=58d3d23f61 endpointID=1664 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-chlhd subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9694cb0c-43a1-496b-889f-be5b3518a909 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=9694cb0c-43a1-496b-889f-be5b3518a909 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=58d3d23f61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1664 identity=877 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/cinder-backup-storage-init-chlhd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 68fbe289-d74e-468e-a113-59356ea925ad default }" containerID=1218ffc2e750b0850f76497505569cee3178e14ac8b40f57f3c77f0dfb2bf108 datapathConfiguration="&{false false false false false }" interface=lxcf6891a3369c4 k8sPodName=openstack/cinder-create-internal-tenant-sw7nj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1218ffc2e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sw7nj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1218ffc2e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=44971f12-10bf-485a-8b2c-53b111351d45,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=44971f12-10bf-485a-8b2c-53b111351d45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sw7nj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1218ffc2e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sw7nj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=44971f12-10bf-485a-8b2c-53b111351d45;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=44971f12-10bf-485a-8b2c-53b111351d45;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1218ffc2e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identity=25613 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=44971f12-10bf-485a-8b2c-53b111351d45,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=44971f12-10bf-485a-8b2c-53b111351d45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sw7nj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1218ffc2e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identity=25613 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sw7nj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1218ffc2e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1154 identity=25613 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sw7nj subsys=endpoint level=info msg="Successful endpoint creation" containerID=1218ffc2e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1154 identity=25613 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sw7nj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1218ffc2e7 endpointID=1154 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-sw7nj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=44971f12-10bf-485a-8b2c-53b111351d45 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=44971f12-10bf-485a-8b2c-53b111351d45 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=1218ffc2e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1154 identity=25613 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-sw7nj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 894648d0-8816-401d-b89c-4c9f512cfb90 default }" containerID=a51e6c8424e36b6ab37f7706a911b3304c9bf564c112e1f5b0899215b7ba3265 datapathConfiguration="&{false false false false false }" interface=lxc57963b2b8e35 k8sPodName=openstack/cinder-storage-init-66vkz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a51e6c8424 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-storage-init-66vkz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a51e6c8424 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5a1d3bee-0f15-48d7-afa9-ca09b2f8978a,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=5a1d3bee-0f15-48d7-afa9-ca09b2f8978a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-storage-init-66vkz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=5a1d3bee-0f15-48d7-afa9-ca09b2f8978a;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=5a1d3bee-0f15-48d7-afa9-ca09b2f8978a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a51e6c8424 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identity=29101 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5a1d3bee-0f15-48d7-afa9-ca09b2f8978a,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=5a1d3bee-0f15-48d7-afa9-ca09b2f8978a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-storage-init-66vkz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a51e6c8424 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identity=29101 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-storage-init-66vkz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a51e6c8424 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1216 identity=29101 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-storage-init-66vkz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a51e6c8424 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1216 identity=29101 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-storage-init-66vkz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a51e6c8424 endpointID=1216 k8sNamespace=openstack k8sPodName=cinder-storage-init-66vkz subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=5a1d3bee-0f15-48d7-afa9-ca09b2f8978a k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=5a1d3bee-0f15-48d7-afa9-ca09b2f8978a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=a51e6c8424 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1216 identity=29101 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-storage-init-66vkz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 ca24119c-f1b7-4aa8-a5f7-8223a037b48f default }" containerID=72cd8a277e7d573e1aa4bd0606e52d9b438d0dafdc3aa9bb26d1e9110c5bb279 datapathConfiguration="&{false false false false false }" interface=lxcfb7ac790d78e k8sPodName=openstack/cinder-bootstrap-4fm2m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72cd8a277e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-bootstrap-4fm2m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72cd8a277e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0f07ef75-8e35-4669-88a0-67032558c8cd,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0f07ef75-8e35-4669-88a0-67032558c8cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-bootstrap-4fm2m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=0f07ef75-8e35-4669-88a0-67032558c8cd;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=0f07ef75-8e35-4669-88a0-67032558c8cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=72cd8a277e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identity=5303 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0f07ef75-8e35-4669-88a0-67032558c8cd,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0f07ef75-8e35-4669-88a0-67032558c8cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-bootstrap-4fm2m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72cd8a277e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identity=5303 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-bootstrap-4fm2m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72cd8a277e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1974 identity=5303 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-bootstrap-4fm2m subsys=endpoint level=info msg="Successful endpoint creation" containerID=72cd8a277e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1974 identity=5303 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-bootstrap-4fm2m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.242 6595b62d-0173-4b7a-94a1-5d1483830ac5 default }" containerID=34633ab260016586f6aed3beeddbd63de3c03cdca23a29e9b3ddc9a14b8c1323 datapathConfiguration="&{false false false false false }" interface=lxc4d8803942926 k8sPodName=openstack/cinder-backup-699f664598-7bc9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34633ab260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=365 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-backup-699f664598-7bc9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34633ab260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=365 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-backup-699f664598-7bc9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34633ab260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=365 identity=35548 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-backup-699f664598-7bc9d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=34633ab260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=365 identity=35548 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-backup-699f664598-7bc9d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 8d3b1414-771e-4c92-b8f0-b7937a4298ba default }" containerID=b301f7d6a26e69e708e203b5595c86088f8ba6b7075a47ab1264e69549083b0f datapathConfiguration="&{false false false false false }" interface=lxcc8268502b896 k8sPodName=openstack/cinder-volume-6bffcfc6dc-mfmgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b301f7d6a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-volume-6bffcfc6dc-mfmgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b301f7d6a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-volume-6bffcfc6dc-mfmgg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b301f7d6a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=9648 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-volume-6bffcfc6dc-mfmgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b301f7d6a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=9648 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-volume-6bffcfc6dc-mfmgg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34633ab260 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=365 identity=35548 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-backup-699f664598-7bc9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=34633ab260 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=365 identity=35548 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-backup-699f664598-7bc9d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b301f7d6a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=537 identity=9648 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-volume-6bffcfc6dc-mfmgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=b301f7d6a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=537 identity=9648 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/cinder-volume-6bffcfc6dc-mfmgg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=72cd8a277e endpointID=1974 k8sNamespace=openstack k8sPodName=cinder-bootstrap-4fm2m subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=0f07ef75-8e35-4669-88a0-67032558c8cd k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=0f07ef75-8e35-4669-88a0-67032558c8cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=72cd8a277e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1974 identity=5303 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/cinder-bootstrap-4fm2m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 cf133bab-38a3-4227-b856-40b1eae89174 default }" containerID=766913d7bc43affaebd67cfe20d967c39ecbad7fc60b1823a06db75bd9097b65 datapathConfiguration="&{false false false false false }" interface=lxcbeeb8cdd72cc k8sPodName=openstack/placement-api-85d88d76cb-2pk2r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=766913d7bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/placement-api-85d88d76cb-2pk2r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=766913d7bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/placement-api-85d88d76cb-2pk2r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=766913d7bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.110 ipv6= k8sPodName=openstack/placement-api-85d88d76cb-2pk2r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=766913d7bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identity=5180 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/placement-api-85d88d76cb-2pk2r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=766913d7bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identity=5180 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/placement-api-85d88d76cb-2pk2r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 4227aada-e878-4246-9c41-07e461269431 default }" containerID=b28f25184d4a75412b05fcd45a331846df785a8634e635afe8e3ca5e6b29aa09 datapathConfiguration="&{false false false false false }" interface=lxcf28b7202d47b k8sPodName=openstack/placement-db-init-fhkxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b28f25184d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3390 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/placement-db-init-fhkxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b28f25184d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3390 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3877d07f-a9ea-4655-8ed6-ba59f95d572e,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=3877d07f-a9ea-4655-8ed6-ba59f95d572e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/placement-db-init-fhkxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=3877d07f-a9ea-4655-8ed6-ba59f95d572e;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=3877d07f-a9ea-4655-8ed6-ba59f95d572e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b28f25184d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3390 identity=64363 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3877d07f-a9ea-4655-8ed6-ba59f95d572e,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=3877d07f-a9ea-4655-8ed6-ba59f95d572e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/placement-db-init-fhkxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b28f25184d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3390 identity=64363 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/placement-db-init-fhkxl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=766913d7bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1890 identity=5180 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/placement-api-85d88d76cb-2pk2r subsys=endpoint level=info msg="Successful endpoint creation" containerID=766913d7bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1890 identity=5180 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/placement-api-85d88d76cb-2pk2r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b28f25184d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3390 identity=64363 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/placement-db-init-fhkxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=b28f25184d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3390 identity=64363 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/placement-db-init-fhkxl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b28f25184d endpointID=3390 k8sNamespace=openstack k8sPodName=placement-db-init-fhkxl subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=3877d07f-a9ea-4655-8ed6-ba59f95d572e k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=3877d07f-a9ea-4655-8ed6-ba59f95d572e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=b28f25184d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3390 identity=64363 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/placement-db-init-fhkxl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 500e1e43-29c7-4c4b-8ca7-c170da4540d1 default }" containerID=56d3ccda7e7bbfb44ab523484ce854a7a8bc8de0bf4cdad9e673d337e57579d2 datapathConfiguration="&{false false false false false }" interface=lxc0bf29706956e k8sPodName=openstack/placement-db-sync-dscv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56d3ccda7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-db-sync-dscv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56d3ccda7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e63a1fb0-e052-4fe2-b933-598492153ebe,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=e63a1fb0-e052-4fe2-b933-598492153ebe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-db-sync-dscv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=e63a1fb0-e052-4fe2-b933-598492153ebe;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=e63a1fb0-e052-4fe2-b933-598492153ebe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56d3ccda7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identity=23523 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e63a1fb0-e052-4fe2-b933-598492153ebe,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=e63a1fb0-e052-4fe2-b933-598492153ebe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-db-sync-dscv6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56d3ccda7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identity=23523 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-db-sync-dscv6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=56d3ccda7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=359 identity=23523 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-db-sync-dscv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=56d3ccda7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=359 identity=23523 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-db-sync-dscv6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=56d3ccda7e endpointID=359 k8sNamespace=openstack k8sPodName=placement-db-sync-dscv6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=e63a1fb0-e052-4fe2-b933-598492153ebe k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=e63a1fb0-e052-4fe2-b933-598492153ebe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=56d3ccda7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=359 identity=23523 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-db-sync-dscv6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 4ba12012-226b-4622-ade4-3ef8f25c15d8 default }" containerID=36c4e240791309ce5fe5fdaa1599cab548a882bf723a30232b5c77f4ef3c2e96 datapathConfiguration="&{false false false false false }" interface=lxc2f95bbb87c7b k8sPodName=openstack/placement-ks-service-2twt2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36c4e24079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-ks-service-2twt2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36c4e24079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=34ee6d42-878f-4690-a103-33396933c93b,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=34ee6d42-878f-4690-a103-33396933c93b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-ks-service-2twt2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=36c4e24079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-ks-service-2twt2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=34ee6d42-878f-4690-a103-33396933c93b;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=34ee6d42-878f-4690-a103-33396933c93b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36c4e24079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identity=14110 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=34ee6d42-878f-4690-a103-33396933c93b,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=34ee6d42-878f-4690-a103-33396933c93b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-ks-service-2twt2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36c4e24079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identity=14110 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-ks-service-2twt2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36c4e24079 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3035 identity=14110 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-ks-service-2twt2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=36c4e24079 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3035 identity=14110 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-ks-service-2twt2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=36c4e24079 endpointID=3035 k8sNamespace=openstack k8sPodName=placement-ks-service-2twt2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=34ee6d42-878f-4690-a103-33396933c93b k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=34ee6d42-878f-4690-a103-33396933c93b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=36c4e24079 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3035 identity=14110 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-ks-service-2twt2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 c2efaaa1-ca0d-4bae-ab1a-e79118d896a3 default }" containerID=a691f9d966fa2f3df2076f15c648aff5b5caf99fc9409e2ed963c9016476b673 datapathConfiguration="&{false false false false false }" interface=lxc6ea9353c3f1b k8sPodName=openstack/placement-ks-user-9qtnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a691f9d966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/placement-ks-user-9qtnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a691f9d966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=21f4ef5d-2e01-4fd5-8a63-777b03856459,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=21f4ef5d-2e01-4fd5-8a63-777b03856459,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/placement-ks-user-9qtnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=21f4ef5d-2e01-4fd5-8a63-777b03856459;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=21f4ef5d-2e01-4fd5-8a63-777b03856459;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a691f9d966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=13009 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=21f4ef5d-2e01-4fd5-8a63-777b03856459,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=21f4ef5d-2e01-4fd5-8a63-777b03856459,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/placement-ks-user-9qtnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a691f9d966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=13009 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/placement-ks-user-9qtnb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a691f9d966 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=77 identity=13009 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/placement-ks-user-9qtnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a691f9d966 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=77 identity=13009 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/placement-ks-user-9qtnb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a691f9d966 endpointID=77 k8sNamespace=openstack k8sPodName=placement-ks-user-9qtnb subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=21f4ef5d-2e01-4fd5-8a63-777b03856459 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=21f4ef5d-2e01-4fd5-8a63-777b03856459 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=a691f9d966 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=77 identity=13009 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/placement-ks-user-9qtnb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 73669f8e-e72f-4fa8-af1e-6ba3e2974a75 default }" containerID=d245af43a72f481abd3431e48a1792b3780c7b2c1ba90598f6ad9f32eb6b405f datapathConfiguration="&{false false false false false }" interface=lxcdc9384d6d657 k8sPodName=openstack/placement-ks-endpoints-mtjhh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d245af43a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-ks-endpoints-mtjhh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d245af43a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c1180b9f-2587-4916-86af-a6bf61d5640b,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c1180b9f-2587-4916-86af-a6bf61d5640b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-ks-endpoints-mtjhh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=c1180b9f-2587-4916-86af-a6bf61d5640b;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c1180b9f-2587-4916-86af-a6bf61d5640b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d245af43a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identity=32378 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c1180b9f-2587-4916-86af-a6bf61d5640b,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c1180b9f-2587-4916-86af-a6bf61d5640b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-ks-endpoints-mtjhh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d245af43a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identity=32378 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-ks-endpoints-mtjhh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d245af43a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1124 identity=32378 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-ks-endpoints-mtjhh subsys=endpoint level=info msg="Successful endpoint creation" containerID=d245af43a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1124 identity=32378 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-ks-endpoints-mtjhh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d245af43a7 endpointID=1124 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-mtjhh subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=c1180b9f-2587-4916-86af-a6bf61d5640b k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c1180b9f-2587-4916-86af-a6bf61d5640b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=d245af43a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1124 identity=32378 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-ks-endpoints-mtjhh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 51a6683f-1313-4c07-afa0-827666077178 default }" containerID=d719f2efbb307c31512feb790a07cc6306dd4153aeda9ff73a956ee638f69fd1 datapathConfiguration="&{false false false false false }" interface=lxc403594f2dedf k8sPodName=openstack/neutron-coredns-7dd4958666-mfjln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d719f2efbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-mfjln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d719f2efbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-mfjln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d719f2efbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identity=18605 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-mfjln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d719f2efbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identity=18605 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-mfjln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d719f2efbb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1474 identity=18605 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-mfjln subsys=endpoint level=info msg="Successful endpoint creation" containerID=d719f2efbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1474 identity=18605 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-mfjln subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.241 ba7cf8f2-c3c1-43c3-9ec1-200e21d0fc4f default }" containerID=3001e46dfab4f4f59a35b72f56bc762c03f8995bcef3a1f4696624cf3858bb90 datapathConfiguration="&{false false false false false }" interface=lxcb2bc02dcde05 k8sPodName=local-path-storage/helper-pod-create-pvc-a947ef7c-53bb-402c-9a53-db349be2e352 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3001e46dfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a947ef7c-53bb-402c-9a53-db349be2e352 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3001e46dfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a947ef7c-53bb-402c-9a53-db349be2e352 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3001e46dfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=3444 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a947ef7c-53bb-402c-9a53-db349be2e352 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3001e46dfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=3444 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a947ef7c-53bb-402c-9a53-db349be2e352 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3001e46dfa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1818 identity=3444 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a947ef7c-53bb-402c-9a53-db349be2e352 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3001e46dfa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1818 identity=3444 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a947ef7c-53bb-402c-9a53-db349be2e352 subsys=daemon level=info msg="Delete endpoint request" containerID=3001e46dfa endpointID=1818 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a947ef7c-53bb-402c-9a53-db349be2e352 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3001e46dfa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1818 identity=3444 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a947ef7c-53bb-402c-9a53-db349be2e352 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 9c0f2d2d-9f7a-43b1-a214-081021bf534a default }" containerID=2299c79588c31ddf46d7638bc29a91f654135a7d409e977d9366e26c5908921a datapathConfiguration="&{false false false false false }" interface=lxc55a09f64ad17 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2299c79588 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2299c79588 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2299c79588 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identity=10749 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2299c79588 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identity=10749 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2299c79588 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2161 identity=10749 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2299c79588 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2161 identity=10749 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.41 2628e900-d4a2-48d3-a0a3-9b17fb10dfda default }" containerID=6d8a331e97c49923a55749471f046437d567f1b53962454cf7ed47eba1088e4c datapathConfiguration="&{false false false false false }" interface=lxc83b4e7cbdec2 k8sPodName=openstack/nova-conductor-7b469644b4-l9kxs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d8a331e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/nova-conductor-7b469644b4-l9kxs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d8a331e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/nova-conductor-7b469644b4-l9kxs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d8a331e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=11840 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/nova-conductor-7b469644b4-l9kxs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6d8a331e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=11840 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/nova-conductor-7b469644b4-l9kxs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 70db035f-cc75-40d7-8227-7351cc78ff83 default }" containerID=488bb385811c735d9e417162f55c45bc80973596442b507fe58a77f20416476a datapathConfiguration="&{false false false false false }" interface=lxc6abd397354da k8sPodName=openstack/nova-api-metadata-6b8cc756f5-sdgwc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=488bb38581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/nova-api-metadata-6b8cc756f5-sdgwc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=488bb38581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/nova-api-metadata-6b8cc756f5-sdgwc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=488bb38581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 identity=13304 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/nova-api-metadata-6b8cc756f5-sdgwc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=488bb38581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 identity=13304 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/nova-api-metadata-6b8cc756f5-sdgwc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 2c9243e1-8f71-4143-b0bf-d5edcdda626a default }" containerID=d57e61e957962d72bf0f02db60d34c15732cba15b69b1b58b86be836a06a3119 datapathConfiguration="&{false false false false false }" interface=lxc58932558e81d k8sPodName=openstack/nova-scheduler-fd547889b-4bxq5 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.139 1276c1ec-f805-46b4-9a85-c325d0dc4d9c default }" containerID=8d986bc0e1c40cea4ac9bbc931b6237f4e3494141f054baa3694ada8c1cf23a1 datapathConfiguration="&{false false false false false }" interface=lxc0a3dd7b79543 k8sPodName=openstack/nova-bootstrap-trzvp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d57e61e957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-scheduler-fd547889b-4bxq5 subsys=endpoint level=info msg="New endpoint" containerID=8d986bc0e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-bootstrap-trzvp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d986bc0e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=97ddc63d-a944-4bf4-b08d-983032c7810d,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=97ddc63d-a944-4bf4-b08d-983032c7810d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-bootstrap-trzvp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=d57e61e957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-scheduler-fd547889b-4bxq5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=97ddc63d-a944-4bf4-b08d-983032c7810d;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=97ddc63d-a944-4bf4-b08d-983032c7810d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d986bc0e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 identity=40180 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=97ddc63d-a944-4bf4-b08d-983032c7810d,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=97ddc63d-a944-4bf4-b08d-983032c7810d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-bootstrap-trzvp oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=8d986bc0e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 identity=40180 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-bootstrap-trzvp subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d57e61e957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=24977 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-scheduler-fd547889b-4bxq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d57e61e957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=24977 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-scheduler-fd547889b-4bxq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d8a331e97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=185 identity=11840 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/nova-conductor-7b469644b4-l9kxs subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d8a331e97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=185 identity=11840 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/nova-conductor-7b469644b4-l9kxs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.251 da99e92e-c445-4bfa-8a2d-3988132cd8d3 default }" containerID=9f13a3564a74593b193559b2b9223c37642bd695ad9954ebcddf5b89c4c16b81 datapathConfiguration="&{false false false false false }" interface=lxc202809ae28d9 k8sPodName=openstack/nova-cell-setup-d84r9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f13a3564a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-cell-setup-d84r9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f13a3564a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=aa6f2ae8-5fd0-430d-afc0-c5f3bfe234de,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=aa6f2ae8-5fd0-430d-afc0-c5f3bfe234de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-cell-setup-d84r9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=488bb38581 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2103 identity=13304 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/nova-api-metadata-6b8cc756f5-sdgwc subsys=endpoint level=info msg="Successful endpoint creation" containerID=488bb38581 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2103 identity=13304 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/nova-api-metadata-6b8cc756f5-sdgwc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.31 d1d5edfc-9f1b-467f-9298-c75bc73888de default }" containerID=9a6a9d2e7e601c35b391e4ffa03117c0eb3aba4480d472c023f800325737e70f datapathConfiguration="&{false false false false false }" interface=lxcc014af90927b k8sPodName=openstack/nova-api-osapi-795497455b-p2twx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a6a9d2e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3324 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-api-osapi-795497455b-p2twx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a6a9d2e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3324 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-api-osapi-795497455b-p2twx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 75465316-b711-4513-be55-0b99d417bbd4 default }" containerID=7c71d1579e89ded919cade31d6ed43a37114319c5fc34fd7bff15f161662e999 datapathConfiguration="&{false false false false false }" interface=lxc31e6a6f05b03 k8sPodName=openstack/nova-db-init-hcs7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c71d1579e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-db-init-hcs7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c71d1579e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=592cfb5c-962b-482c-8556-936b8e8582ee,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=592cfb5c-962b-482c-8556-936b8e8582ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-db-init-hcs7b subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=aa6f2ae8-5fd0-430d-afc0-c5f3bfe234de;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=aa6f2ae8-5fd0-430d-afc0-c5f3bfe234de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=9f13a3564a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identity=28342 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=aa6f2ae8-5fd0-430d-afc0-c5f3bfe234de,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=aa6f2ae8-5fd0-430d-afc0-c5f3bfe234de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-cell-setup-d84r9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f13a3564a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identity=28342 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-cell-setup-d84r9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d986bc0e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3661 identity=40180 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-bootstrap-trzvp subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d986bc0e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3661 identity=40180 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-bootstrap-trzvp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d57e61e957 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=491 identity=24977 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-scheduler-fd547889b-4bxq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d57e61e957 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=491 identity=24977 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-scheduler-fd547889b-4bxq5 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a6a9d2e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3324 identity=17195 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-api-osapi-795497455b-p2twx oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=9a6a9d2e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3324 identity=17195 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-api-osapi-795497455b-p2twx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f13a3564a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1722 identity=28342 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-cell-setup-d84r9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f13a3564a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1722 identity=28342 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-cell-setup-d84r9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7c71d1579e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-db-init-hcs7b line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a6a9d2e7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3324 identity=17195 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-api-osapi-795497455b-p2twx subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a6a9d2e7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3324 identity=17195 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/nova-api-osapi-795497455b-p2twx subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=592cfb5c-962b-482c-8556-936b8e8582ee;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=592cfb5c-962b-482c-8556-936b8e8582ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c71d1579e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=6936 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=592cfb5c-962b-482c-8556-936b8e8582ee,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=592cfb5c-962b-482c-8556-936b8e8582ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-db-init-hcs7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c71d1579e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=6936 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-db-init-hcs7b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c71d1579e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=560 identity=6936 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-db-init-hcs7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c71d1579e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=560 identity=6936 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-db-init-hcs7b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 3545bc4c-48e6-44d4-a5a4-8863190b8d0c default }" containerID=ec8b6b273ed1d19c52c339291fa8d9c61d9e4171714f47ba32ae0f21137ea3fc datapathConfiguration="&{false false false false false }" interface=lxc7a8a096ab6ae k8sPodName=openstack/nova-novncproxy-8d766fc8f-dk67p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec8b6b273e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/nova-novncproxy-8d766fc8f-dk67p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec8b6b273e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/nova-novncproxy-8d766fc8f-dk67p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec8b6b273e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identity=5010 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/nova-novncproxy-8d766fc8f-dk67p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec8b6b273e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identity=5010 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/nova-novncproxy-8d766fc8f-dk67p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec8b6b273e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=935 identity=5010 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/nova-novncproxy-8d766fc8f-dk67p subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec8b6b273e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=935 identity=5010 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/nova-novncproxy-8d766fc8f-dk67p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c71d1579e endpointID=560 k8sNamespace=openstack k8sPodName=nova-db-init-hcs7b subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=592cfb5c-962b-482c-8556-936b8e8582ee k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=592cfb5c-962b-482c-8556-936b8e8582ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=7c71d1579e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=560 identity=6936 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/nova-db-init-hcs7b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 12bead7e-e000-4ccf-aaf8-a6fcfb9cdf91 default }" containerID=529c12a56f73187d752224ffd00e89127f461fbec06339cbe67a8939bd2162a9 datapathConfiguration="&{false false false false false }" interface=lxc7443c27b5c7a k8sPodName=openstack/nova-db-sync-zxlzl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=529c12a56f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/nova-db-sync-zxlzl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=529c12a56f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=dd5bdc7b-b143-460b-a5aa-4047d80694a7,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=dd5bdc7b-b143-460b-a5aa-4047d80694a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/nova-db-sync-zxlzl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=dd5bdc7b-b143-460b-a5aa-4047d80694a7;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=dd5bdc7b-b143-460b-a5aa-4047d80694a7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=529c12a56f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identity=59408 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=dd5bdc7b-b143-460b-a5aa-4047d80694a7,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=dd5bdc7b-b143-460b-a5aa-4047d80694a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/nova-db-sync-zxlzl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=529c12a56f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identity=59408 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/nova-db-sync-zxlzl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=529c12a56f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=414 identity=59408 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/nova-db-sync-zxlzl subsys=endpoint level=info msg="Successful endpoint creation" containerID=529c12a56f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=414 identity=59408 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/nova-db-sync-zxlzl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=529c12a56f endpointID=414 k8sNamespace=openstack k8sPodName=nova-db-sync-zxlzl subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=dd5bdc7b-b143-460b-a5aa-4047d80694a7 k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=dd5bdc7b-b143-460b-a5aa-4047d80694a7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=529c12a56f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=414 identity=59408 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/nova-db-sync-zxlzl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 2b1e2270-e419-4263-a696-98da5a016d31 default }" containerID=60714c78fbd94b8a39045ca85037d0cbd47c71603494423392ef4ff01688fdf8 datapathConfiguration="&{false false false false false }" interface=lxc2c80c3320aee k8sPodName=openstack/nova-rabbit-init-xmtnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60714c78fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-rabbit-init-xmtnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60714c78fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=48fd9008-99b3-4f56-8889-40ce43450261,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=48fd9008-99b3-4f56-8889-40ce43450261,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-rabbit-init-xmtnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=48fd9008-99b3-4f56-8889-40ce43450261;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=48fd9008-99b3-4f56-8889-40ce43450261;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60714c78fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identity=58620 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=48fd9008-99b3-4f56-8889-40ce43450261,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=48fd9008-99b3-4f56-8889-40ce43450261,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-rabbit-init-xmtnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60714c78fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identity=58620 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-rabbit-init-xmtnb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60714c78fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=180 identity=58620 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-rabbit-init-xmtnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=60714c78fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=180 identity=58620 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-rabbit-init-xmtnb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60714c78fb endpointID=180 k8sNamespace=openstack k8sPodName=nova-rabbit-init-xmtnb subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=48fd9008-99b3-4f56-8889-40ce43450261 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=48fd9008-99b3-4f56-8889-40ce43450261 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=60714c78fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=180 identity=58620 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-rabbit-init-xmtnb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 0d450cdc-7a33-4722-8d3b-e8a23de63897 default }" containerID=e89e68602704f28f500d9aea590a475b845d7a67e542b60772236c8bc17d083e datapathConfiguration="&{false false false false false }" interface=lxc1dcc1cc430da k8sPodName=openstack/nova-ks-service-6j65p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e89e686027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/nova-ks-service-6j65p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e89e686027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0ed8429f-796b-4598-bcc6-e505088da9cf,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=0ed8429f-796b-4598-bcc6-e505088da9cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/nova-ks-service-6j65p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=0ed8429f-796b-4598-bcc6-e505088da9cf;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=0ed8429f-796b-4598-bcc6-e505088da9cf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e89e686027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=33345 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0ed8429f-796b-4598-bcc6-e505088da9cf,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=0ed8429f-796b-4598-bcc6-e505088da9cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/nova-ks-service-6j65p oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e89e686027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=33345 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/nova-ks-service-6j65p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e89e686027 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1289 identity=33345 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/nova-ks-service-6j65p subsys=endpoint level=info msg="Successful endpoint creation" containerID=e89e686027 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1289 identity=33345 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/nova-ks-service-6j65p subsys=daemon level=info msg="Delete endpoint request" containerID=e89e686027 endpointID=1289 k8sNamespace=openstack k8sPodName=nova-ks-service-6j65p subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=0ed8429f-796b-4598-bcc6-e505088da9cf k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=0ed8429f-796b-4598-bcc6-e505088da9cf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=e89e686027 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1289 identity=33345 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/nova-ks-service-6j65p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 c53c474b-7e93-4aad-b8e7-5dd66cc51a4a default }" containerID=ef5ea0df5d720c77804ac9534ca9a9d51f674d15db492a70adbfd53452040b1f datapathConfiguration="&{false false false false false }" interface=lxce536ed07cd00 k8sPodName=openstack/nova-ks-endpoints-r4ppt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef5ea0df5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/nova-ks-endpoints-r4ppt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef5ea0df5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=10b4820c-3a3d-4bba-8c54-85417fecdfed,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=10b4820c-3a3d-4bba-8c54-85417fecdfed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/nova-ks-endpoints-r4ppt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=10b4820c-3a3d-4bba-8c54-85417fecdfed;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=10b4820c-3a3d-4bba-8c54-85417fecdfed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef5ea0df5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 identity=2648 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=10b4820c-3a3d-4bba-8c54-85417fecdfed,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=10b4820c-3a3d-4bba-8c54-85417fecdfed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/nova-ks-endpoints-r4ppt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef5ea0df5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 identity=2648 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/nova-ks-endpoints-r4ppt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef5ea0df5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3141 identity=2648 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/nova-ks-endpoints-r4ppt subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef5ea0df5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3141 identity=2648 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/nova-ks-endpoints-r4ppt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef5ea0df5d endpointID=3141 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-r4ppt subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=10b4820c-3a3d-4bba-8c54-85417fecdfed k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=10b4820c-3a3d-4bba-8c54-85417fecdfed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=ef5ea0df5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3141 identity=2648 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/nova-ks-endpoints-r4ppt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 47e15b50-33a4-442c-b440-9cfa041ee054 default }" containerID=2a3126bdc8259bfb2cc0fe4e7ea93f5483e7bbd35b3f3db90eebdac8da46bf48 datapathConfiguration="&{false false false false false }" interface=lxc56b25fcb15ef k8sPodName=openstack/nova-ks-user-47cfs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a3126bdc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=211 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/nova-ks-user-47cfs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a3126bdc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=211 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=7084bd5e-6be4-4e98-aeca-4f501b9f52c0,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=7084bd5e-6be4-4e98-aeca-4f501b9f52c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/nova-ks-user-47cfs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=7084bd5e-6be4-4e98-aeca-4f501b9f52c0;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=7084bd5e-6be4-4e98-aeca-4f501b9f52c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a3126bdc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=211 identity=25721 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=7084bd5e-6be4-4e98-aeca-4f501b9f52c0,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=7084bd5e-6be4-4e98-aeca-4f501b9f52c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/nova-ks-user-47cfs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2a3126bdc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=211 identity=25721 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/nova-ks-user-47cfs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a3126bdc8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=211 identity=25721 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/nova-ks-user-47cfs subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a3126bdc8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=211 identity=25721 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/nova-ks-user-47cfs subsys=daemon level=info msg="Delete endpoint request" containerID=2a3126bdc8 endpointID=211 k8sNamespace=openstack k8sPodName=nova-ks-user-47cfs subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=7084bd5e-6be4-4e98-aeca-4f501b9f52c0 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=7084bd5e-6be4-4e98-aeca-4f501b9f52c0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=2a3126bdc8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=211 identity=25721 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/nova-ks-user-47cfs subsys=endpoint level=info msg="Delete endpoint request" containerID=8d986bc0e1 endpointID=3661 k8sNamespace=openstack k8sPodName=nova-bootstrap-trzvp subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=97ddc63d-a944-4bf4-b08d-983032c7810d k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=97ddc63d-a944-4bf4-b08d-983032c7810d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=8d986bc0e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3661 identity=40180 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/nova-bootstrap-trzvp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 34709430-5355-4d09-8499-ae4580d089e9 default }" containerID=923f01b966f282f26589d7edc13a1035c9b30d4c188d92a40fd1d45b1e9f8d6a datapathConfiguration="&{false false false false false }" interface=lxc18e73dcfb080 k8sPodName=local-path-storage/helper-pod-create-pvc-393125bb-4753-4bd4-93fd-4e30b1c73973 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=923f01b966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-393125bb-4753-4bd4-93fd-4e30b1c73973 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=923f01b966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-393125bb-4753-4bd4-93fd-4e30b1c73973 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=923f01b966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identity=3444 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-393125bb-4753-4bd4-93fd-4e30b1c73973 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=923f01b966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identity=3444 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-393125bb-4753-4bd4-93fd-4e30b1c73973 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=923f01b966 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=180 identity=3444 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-393125bb-4753-4bd4-93fd-4e30b1c73973 subsys=endpoint level=info msg="Successful endpoint creation" containerID=923f01b966 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=180 identity=3444 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-393125bb-4753-4bd4-93fd-4e30b1c73973 subsys=daemon level=info msg="Delete endpoint request" containerID=923f01b966 endpointID=180 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-393125bb-4753-4bd4-93fd-4e30b1c73973 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=923f01b966 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=180 identity=3444 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-393125bb-4753-4bd4-93fd-4e30b1c73973 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 45cd4701-b8b3-4a18-943b-113f84822958 default }" containerID=02b3d3e0db843a3786d3572112f43d4584cb38680ee122d0156e2dcf65b164d5 datapathConfiguration="&{false false false false false }" interface=lxc565f1515e751 k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02b3d3e0db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02b3d3e0db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=02b3d3e0db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=02b3d3e0db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 identity=60194 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02b3d3e0db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 identity=60194 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02b3d3e0db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=705 identity=60194 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=02b3d3e0db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=705 identity=60194 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.216 e87a1538-d03f-47eb-9d4a-549fa7c58764 default }" containerID=285973ef27667fcf0acce9f3daee89fcc5c1a7e577b4f3beb9a77fcb77d0932f datapathConfiguration="&{false false false false false }" interface=lxce347659dc27b k8sPodName=openstack/neutron-rpc-server-567bc9d6f4-gbt6x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=285973ef27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/neutron-rpc-server-567bc9d6f4-gbt6x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=285973ef27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/neutron-rpc-server-567bc9d6f4-gbt6x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=285973ef27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 identity=23055 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/neutron-rpc-server-567bc9d6f4-gbt6x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=285973ef27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 identity=23055 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/neutron-rpc-server-567bc9d6f4-gbt6x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 2a1536a2-4625-4362-b50f-caeb479620c7 default }" containerID=659223b8d46ecf4e3ea3eba99417d32a3ee24df0361c37c90ad56b6f0290a4cf datapathConfiguration="&{false false false false false }" interface=lxcb799f36f88e6 k8sPodName=openstack/neutron-server-77689cbd8f-lgs8c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=659223b8d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/neutron-server-77689cbd8f-lgs8c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=659223b8d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/neutron-server-77689cbd8f-lgs8c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=659223b8d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=30386 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/neutron-server-77689cbd8f-lgs8c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=659223b8d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=30386 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/neutron-server-77689cbd8f-lgs8c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 369efd0a-a504-48a9-a719-c5d0830a9130 default }" containerID=4e7c12e529826de7393cdb1182061c0fb3cff0492fc38d557b9ad9281fb26d8a datapathConfiguration="&{false false false false false }" interface=lxce4d80d697e05 k8sPodName=openstack/neutron-db-init-4hnx6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e7c12e529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/neutron-db-init-4hnx6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e7c12e529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=dfa259ae-0e3b-4249-867c-68ed807759b1,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=dfa259ae-0e3b-4249-867c-68ed807759b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/neutron-db-init-4hnx6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=dfa259ae-0e3b-4249-867c-68ed807759b1;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=dfa259ae-0e3b-4249-867c-68ed807759b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e7c12e529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identity=5256 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=dfa259ae-0e3b-4249-867c-68ed807759b1,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=dfa259ae-0e3b-4249-867c-68ed807759b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/neutron-db-init-4hnx6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e7c12e529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identity=5256 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/neutron-db-init-4hnx6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=285973ef27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2815 identity=23055 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/neutron-rpc-server-567bc9d6f4-gbt6x subsys=endpoint level=info msg="Successful endpoint creation" containerID=285973ef27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2815 identity=23055 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/neutron-rpc-server-567bc9d6f4-gbt6x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=659223b8d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=533 identity=30386 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/neutron-server-77689cbd8f-lgs8c subsys=endpoint level=info msg="Successful endpoint creation" containerID=659223b8d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=533 identity=30386 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/neutron-server-77689cbd8f-lgs8c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4e7c12e529 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1806 identity=5256 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/neutron-db-init-4hnx6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e7c12e529 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1806 identity=5256 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/neutron-db-init-4hnx6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e7c12e529 endpointID=1806 k8sNamespace=openstack k8sPodName=neutron-db-init-4hnx6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=dfa259ae-0e3b-4249-867c-68ed807759b1 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=dfa259ae-0e3b-4249-867c-68ed807759b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=4e7c12e529 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1806 identity=5256 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/neutron-db-init-4hnx6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 c3bd372b-ef07-4433-a027-0dd68613ec70 default }" containerID=c1862b06c9ca814092660f57cc72a06e0b47fc57899dd1df83dc18a6a76ace42 datapathConfiguration="&{false false false false false }" interface=lxc248612e560b8 k8sPodName=openstack/neutron-db-sync-j2nxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1862b06c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/neutron-db-sync-j2nxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1862b06c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=16ef2947-c984-4044-9a4e-75282a2a1c14,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=16ef2947-c984-4044-9a4e-75282a2a1c14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/neutron-db-sync-j2nxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=16ef2947-c984-4044-9a4e-75282a2a1c14;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=16ef2947-c984-4044-9a4e-75282a2a1c14;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1862b06c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 identity=25736 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=16ef2947-c984-4044-9a4e-75282a2a1c14,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=16ef2947-c984-4044-9a4e-75282a2a1c14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/neutron-db-sync-j2nxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1862b06c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 identity=25736 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/neutron-db-sync-j2nxl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1862b06c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2304 identity=25736 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/neutron-db-sync-j2nxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1862b06c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2304 identity=25736 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/neutron-db-sync-j2nxl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c1862b06c9 endpointID=2304 k8sNamespace=openstack k8sPodName=neutron-db-sync-j2nxl subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=16ef2947-c984-4044-9a4e-75282a2a1c14 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=16ef2947-c984-4044-9a4e-75282a2a1c14 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=c1862b06c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2304 identity=25736 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/neutron-db-sync-j2nxl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 4c38ea63-1206-4e3c-bab0-24640c72c590 default }" containerID=65abf97d5dabddbd0a1b7583e3bdf9ee63294710c0d1baeedaf02edbffffefc8 datapathConfiguration="&{false false false false false }" interface=lxc7e2403c6acfa k8sPodName=openstack/neutron-rabbit-init-r2mpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65abf97d5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=722 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/neutron-rabbit-init-r2mpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65abf97d5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=722 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=49594a4e-9172-4686-a44e-58c9f85e9328,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=49594a4e-9172-4686-a44e-58c9f85e9328,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/neutron-rabbit-init-r2mpb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=49594a4e-9172-4686-a44e-58c9f85e9328;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=49594a4e-9172-4686-a44e-58c9f85e9328;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65abf97d5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=722 identity=17714 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=49594a4e-9172-4686-a44e-58c9f85e9328,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=49594a4e-9172-4686-a44e-58c9f85e9328,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/neutron-rabbit-init-r2mpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65abf97d5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=722 identity=17714 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/neutron-rabbit-init-r2mpb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65abf97d5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=722 identity=17714 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/neutron-rabbit-init-r2mpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=65abf97d5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=722 identity=17714 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/neutron-rabbit-init-r2mpb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65abf97d5d endpointID=722 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-r2mpb subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=49594a4e-9172-4686-a44e-58c9f85e9328 k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=49594a4e-9172-4686-a44e-58c9f85e9328 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=65abf97d5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=722 identity=17714 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/neutron-rabbit-init-r2mpb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 25fe3bce-023f-4a5c-8dc1-5774fc78e486 default }" containerID=2dc7e20262de3a696d82d1f0c6ada55cf4e2eb3e2127dedb8ebf48cf09901f63 datapathConfiguration="&{false false false false false }" interface=lxc1c46ca6be5ce k8sPodName=openstack/neutron-ks-service-wz2hz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dc7e20262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/neutron-ks-service-wz2hz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dc7e20262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=b56dee8d-0284-43fe-bf50-4a88e9b47221,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=b56dee8d-0284-43fe-bf50-4a88e9b47221,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/neutron-ks-service-wz2hz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=b56dee8d-0284-43fe-bf50-4a88e9b47221;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=b56dee8d-0284-43fe-bf50-4a88e9b47221;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dc7e20262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 identity=14473 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=b56dee8d-0284-43fe-bf50-4a88e9b47221,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=b56dee8d-0284-43fe-bf50-4a88e9b47221,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/neutron-ks-service-wz2hz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2dc7e20262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 identity=14473 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/neutron-ks-service-wz2hz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2dc7e20262 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1028 identity=14473 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/neutron-ks-service-wz2hz subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dc7e20262 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1028 identity=14473 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/neutron-ks-service-wz2hz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2dc7e20262 endpointID=1028 k8sNamespace=openstack k8sPodName=neutron-ks-service-wz2hz subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=b56dee8d-0284-43fe-bf50-4a88e9b47221 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=b56dee8d-0284-43fe-bf50-4a88e9b47221 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=2dc7e20262 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1028 identity=14473 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/neutron-ks-service-wz2hz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 46364a35-edf6-43fd-addf-49ae49dc8db1 default }" containerID=d68f7cafee11906fd594d084558975b237de1a9ae50fd421bc1051c4efaee61d datapathConfiguration="&{false false false false false }" interface=lxcb4f0787cdb53 k8sPodName=openstack/neutron-ks-endpoints-knjtd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d68f7cafee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/neutron-ks-endpoints-knjtd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d68f7cafee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1244f4d6-352e-49e8-8f6f-f30febb1133f,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1244f4d6-352e-49e8-8f6f-f30febb1133f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/neutron-ks-endpoints-knjtd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=1244f4d6-352e-49e8-8f6f-f30febb1133f;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1244f4d6-352e-49e8-8f6f-f30febb1133f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d68f7cafee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=28813 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1244f4d6-352e-49e8-8f6f-f30febb1133f,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1244f4d6-352e-49e8-8f6f-f30febb1133f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/neutron-ks-endpoints-knjtd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d68f7cafee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=28813 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/neutron-ks-endpoints-knjtd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d68f7cafee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=256 identity=28813 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/neutron-ks-endpoints-knjtd subsys=endpoint level=info msg="Successful endpoint creation" containerID=d68f7cafee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=256 identity=28813 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/neutron-ks-endpoints-knjtd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d68f7cafee endpointID=256 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-knjtd subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=1244f4d6-352e-49e8-8f6f-f30febb1133f k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1244f4d6-352e-49e8-8f6f-f30febb1133f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=d68f7cafee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=256 identity=28813 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/neutron-ks-endpoints-knjtd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 afc526dc-37b4-47af-b41d-20591159773a default }" containerID=85504b196773feabe3f3e70d3b8be622ab164ecc9109b22aef7583ce4c6aa585 datapathConfiguration="&{false false false false false }" interface=lxc8e8dc4be399f k8sPodName=openstack/neutron-ks-user-k9z65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85504b1967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/neutron-ks-user-k9z65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85504b1967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=05296ead-bf43-4d6c-915c-d4a360f0e8e0,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=05296ead-bf43-4d6c-915c-d4a360f0e8e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/neutron-ks-user-k9z65 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=05296ead-bf43-4d6c-915c-d4a360f0e8e0;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=05296ead-bf43-4d6c-915c-d4a360f0e8e0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=85504b1967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identity=10376 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=05296ead-bf43-4d6c-915c-d4a360f0e8e0,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=05296ead-bf43-4d6c-915c-d4a360f0e8e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/neutron-ks-user-k9z65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85504b1967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identity=10376 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/neutron-ks-user-k9z65 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85504b1967 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=851 identity=10376 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/neutron-ks-user-k9z65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=85504b1967 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=851 identity=10376 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/neutron-ks-user-k9z65 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85504b1967 endpointID=851 k8sNamespace=openstack k8sPodName=neutron-ks-user-k9z65 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=05296ead-bf43-4d6c-915c-d4a360f0e8e0 k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=05296ead-bf43-4d6c-915c-d4a360f0e8e0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=85504b1967 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=851 identity=10376 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/neutron-ks-user-k9z65 subsys=endpoint