level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="744.576µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="44.061µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="757.936µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.15µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=88.763286ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="10.06µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.75µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="52.901µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="54.881µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="60.702µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="350.118µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.47µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.598099ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.841977ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="43.531µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="37.751µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="197.024µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="90.622µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="69.721µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=50.920688ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="170.614µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="16.301µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.112.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.361039ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.031689ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.593579ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.71µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.23µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.01µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="20.85µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="80.651µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="273.446µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.79µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="213.955µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="718.016µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.225926ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.43µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.931µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.112 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.112 ipAddr.ipv6="" k8sNodeIP=199.19.213.112 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.112" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.254" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.112" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.112} {CiliumInternalIP 10.0.0.254}] 10.0.0.0/24 [] [] 10.0.0.74 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:41551" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.426829263s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="14.06µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="9.33µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="32.501µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="26.1µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4049 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4049 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4049 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.361548007s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.109 7e252c0b-f15a-4fc7-a6d3-5612870c66fe default }" containerID=e6fbecef14b120385fcb2fc2f0cfacf50a783584742c68c499f35952a0c19031 datapathConfiguration="&{false false false false false }" interface=lxc509440fe980e k8sPodName=kube-system/coredns-67659f764b-9gpt5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6fbecef14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-67659f764b-9gpt5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6fbecef14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-67659f764b-9gpt5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6fbecef14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 identity=49474 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-67659f764b-9gpt5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e6fbecef14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 identity=49474 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-67659f764b-9gpt5 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=305.891557ms file-path=/var/run/cilium/state/templates/47ee58c3d5796aac3e4ac86ab06817739524737e2ac1b050d2f37aabac3293c2/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.168 f5d80b8b-f86b-43d0-8bd9-2e9aa9c35213 default }" containerID=0cc57e506880413edfdfe4f934eb38380fc6b9f9940296cfd182ca62b31f2a18 datapathConfiguration="&{false false false false false }" interface=lxc7ce14529b2f8 k8sPodName=cert-manager/cert-manager-startupapicheck-mtxzv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cc57e5068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mtxzv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cc57e5068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f83e9e15-af88-4a01-9316-1ce1a1375af7,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f83e9e15-af88-4a01-9316-1ce1a1375af7,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mtxzv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=f83e9e15-af88-4a01-9316-1ce1a1375af7;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=f83e9e15-af88-4a01-9316-1ce1a1375af7;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cc57e5068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identity=12474 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f83e9e15-af88-4a01-9316-1ce1a1375af7,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f83e9e15-af88-4a01-9316-1ce1a1375af7,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mtxzv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cc57e5068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identity=12474 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mtxzv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 8e437c7d-3c84-4e97-b715-8fc85428d8eb default }" containerID=282e591ea9494c5e02ad0ba9ce49518ab2e932223354898bf614939232237952 datapathConfiguration="&{false false false false false }" interface=lxc40181bc1306f k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5n9df labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=282e591ea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5n9df subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=282e591ea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5n9df subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.36 1592880d-01ac-42f3-8fea-bea5363bba59 default }" containerID=3fe3c540aa4e7f016ad6b754068fc3783a3ceff12cd1afde80ee6141561e9118 datapathConfiguration="&{false false false false false }" interface=lxc8f125d7fe3ab k8sPodName=kube-system/coredns-7c96b6546b-m9rjr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fe3c540aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 ipv4=10.0.0.36 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m9rjr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fe3c540aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.36 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m9rjr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3fe3c540aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=49474 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.36 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m9rjr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3fe3c540aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=49474 ipv4=10.0.0.36 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m9rjr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 ba0ade1a-3077-4471-bb35-20563100d8f0 default }" containerID=56970fcd7b57caa7a6b179d76eb78a7b710ef95ae49c8c3c3fabbba625a060e6 datapathConfiguration="&{false false false false false }" interface=lxccc1ae431d5b4 k8sPodName=cert-manager/cert-manager-75c4c745bc-sfnwf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56970fcd7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sfnwf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 f83a7b68-20c8-489e-8403-dfa667477fa2 default }" containerID=af2bcc2f0a62768e6078f6155decf9da66f454741f1172adacbcfb8ce5a1aea4 datapathConfiguration="&{false false false false false }" interface=lxc31e791f6b6ba k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gbqgz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af2bcc2f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gbqgz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56970fcd7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sfnwf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af2bcc2f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gbqgz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 4ccd1f29-d581-44e4-bedd-47f1bd64dc49 default }" containerID=9ab76739e66ee5f0b967f129d6501c7712efc9beb33fe65b81d309f1e834fda9 datapathConfiguration="&{false false false false false }" interface=lxcd8a327ed871a k8sPodName=kube-system/coredns-67659f764b-cqnnf labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.200 2d030a69-9d6c-4a68-9c6c-0e03ae9169be default }" containerID=7f17b931eab2617aa1300fbb85ea6a37835af86335af40affee07d39de43d634 datapathConfiguration="&{false false false false false }" interface=lxc8b6940168612 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbq4m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ab76739e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 ipv4=10.0.0.107 ipv6= k8sPodName=kube-system/coredns-67659f764b-cqnnf subsys=endpoint level=info msg="New endpoint" containerID=7f17b931ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbq4m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ab76739e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.107 ipv6= k8sPodName=kube-system/coredns-67659f764b-cqnnf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9ab76739e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identity=49474 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.107 ipv6= k8sPodName=kube-system/coredns-67659f764b-cqnnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ab76739e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identity=49474 ipv4=10.0.0.107 ipv6= k8sPodName=kube-system/coredns-67659f764b-cqnnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f17b931ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbq4m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4049 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=282e591ea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identity=2884 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5n9df oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=282e591ea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identity=2884 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5n9df subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 ipv4=10.0.0.74 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identityLabels="reserved:health" ipv4=10.0.0.74 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identity=4 identityLabels="reserved:health" ipv4=10.0.0.74 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7f17b931ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbq4m line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=af2bcc2f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gbqgz line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=56970fcd7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sfnwf line=611 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.082172936s file-path=/var/run/cilium/state/templates/5e9ad8f4d89b5d90ca201aaf6d05fa8df87c4b4cd689aee3fb635b40c56ab87c/bpf_lxc.o subsys=datapath-loader level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56970fcd7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 identity=34547 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sfnwf oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=56970fcd7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 identity=34547 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sfnwf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3fe3c540aa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=221 identity=49474 ipv4=10.0.0.36 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m9rjr subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fe3c540aa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=221 identity=49474 ipv4=10.0.0.36 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m9rjr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=282e591ea9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1120 identity=2884 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5n9df subsys=endpoint level=info msg="Successful endpoint creation" containerID=282e591ea9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1120 identity=2884 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5n9df subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=132 identity=4 ipv4=10.0.0.74 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0cc57e5068 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1789 identity=12474 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mtxzv subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cc57e5068 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1789 identity=12474 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mtxzv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9ab76739e6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1106 identity=49474 ipv4=10.0.0.107 ipv6= k8sPodName=kube-system/coredns-67659f764b-cqnnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ab76739e6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1106 identity=49474 ipv4=10.0.0.107 ipv6= k8sPodName=kube-system/coredns-67659f764b-cqnnf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e6fbecef14 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1608 identity=49474 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-67659f764b-9gpt5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6fbecef14 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1608 identity=49474 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-67659f764b-9gpt5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=56970fcd7b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2167 identity=34547 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sfnwf subsys=endpoint level=info msg="Successful endpoint creation" containerID=56970fcd7b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2167 identity=34547 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sfnwf subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=af2bcc2f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gbqgz line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=7f17b931ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbq4m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af2bcc2f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 identity=45249 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gbqgz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af2bcc2f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 identity=45249 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gbqgz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=af2bcc2f0a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=815 identity=45249 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gbqgz subsys=endpoint level=info msg="Successful endpoint creation" containerID=af2bcc2f0a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=815 identity=45249 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gbqgz subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f17b931ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identity=35162 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbq4m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f17b931ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identity=35162 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbq4m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f17b931ea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3947 identity=35162 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbq4m subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f17b931ea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3947 identity=35162 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbq4m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3fe3c540aa endpointID=221 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-m9rjr subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=3fe3c540aa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=221 identity=49474 ipv4=10.0.0.36 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m9rjr subsys=endpoint level=info msg="Delete endpoint request" containerID=0cc57e5068 endpointID=1789 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-mtxzv subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=f83e9e15-af88-4a01-9316-1ce1a1375af7 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=f83e9e15-af88-4a01-9316-1ce1a1375af7 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=0cc57e5068 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1789 identity=12474 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mtxzv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 af90e15a-83c2-4296-9fb6-3886ca96df09 default }" containerID=60686a85ce3a743f453151ba209db7df351e467000b3755b25d74512a768949e datapathConfiguration="&{false false false false false }" interface=lxc8943eda50617 k8sPodName=ingress-nginx/ingress-nginx-admission-create-sbwdd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60686a85ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sbwdd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60686a85ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=05d75c47-e69b-48e2-9009-6d1428d0e371,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=05d75c47-e69b-48e2-9009-6d1428d0e371,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sbwdd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=05d75c47-e69b-48e2-9009-6d1428d0e371;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=05d75c47-e69b-48e2-9009-6d1428d0e371;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60686a85ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=33730 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=05d75c47-e69b-48e2-9009-6d1428d0e371,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=05d75c47-e69b-48e2-9009-6d1428d0e371,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sbwdd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=60686a85ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=33730 ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sbwdd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60686a85ce datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=152 identity=33730 ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sbwdd subsys=endpoint level=info msg="Successful endpoint creation" containerID=60686a85ce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=152 identity=33730 ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sbwdd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60686a85ce endpointID=152 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-sbwdd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=05d75c47-e69b-48e2-9009-6d1428d0e371 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=05d75c47-e69b-48e2-9009-6d1428d0e371 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=60686a85ce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=152 identity=33730 ipv4=10.0.0.43 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sbwdd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 fb2c8e3d-3961-4508-a542-bd6d03a88683 default }" containerID=64a53f0f626c159789b0273dede40cc1a6e546cf82b9f1b5a4961004a99f16c2 datapathConfiguration="&{false false false false false }" interface=lxcc299332ef416 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5z9s5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64a53f0f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5z9s5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64a53f0f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5z9s5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=64a53f0f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5z9s5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64a53f0f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 identity=1195 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5z9s5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64a53f0f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 identity=1195 ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5z9s5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64a53f0f62 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1707 identity=1195 ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5z9s5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=64a53f0f62 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1707 identity=1195 ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5z9s5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 2033b35b-d980-4d54-adfb-6a3354a5a783 default }" containerID=2b3e0875a14e477da65ebbb21f7778ad2ee67a0c61e3702b11f3f14c4bbe62b4 datapathConfiguration="&{false false false false false }" interface=lxc4bf9b08d4f65 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqd7w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b3e0875a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqd7w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b3e0875a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b199e3e1-078c-4fdf-8b30-6686f2fbfa80,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=b199e3e1-078c-4fdf-8b30-6686f2fbfa80,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqd7w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=b199e3e1-078c-4fdf-8b30-6686f2fbfa80;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=b199e3e1-078c-4fdf-8b30-6686f2fbfa80;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b3e0875a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 identity=21517 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b199e3e1-078c-4fdf-8b30-6686f2fbfa80,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=b199e3e1-078c-4fdf-8b30-6686f2fbfa80,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqd7w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b3e0875a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 identity=21517 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqd7w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b3e0875a1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3116 identity=21517 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqd7w subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b3e0875a1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3116 identity=21517 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqd7w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b3e0875a1 endpointID=3116 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-bqd7w subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=b199e3e1-078c-4fdf-8b30-6686f2fbfa80 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=b199e3e1-078c-4fdf-8b30-6686f2fbfa80 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=2b3e0875a1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3116 identity=21517 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqd7w subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=e9e0867a-6380-4740-9b61-563b3a0463a9] Description:}]" policyAddRequest=53ccd4c2-63ca-4dba-b92c-83b306ea5e5d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=53ccd4c2-63ca-4dba-b92c-83b306ea5e5d policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8d73a5c5-78d2-4dda-b8a3-a704f32eb013] Description:}]" policyAddRequest=1b978d51-dc0c-4b6e-9140-86f150e11e3a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=1b978d51-dc0c-4b6e-9140-86f150e11e3a policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.178 12d2c425-baa8-49ec-9f31-4f34cdfeef8b default }" containerID=89a9979c6be8c29b21979cf1b4684231debebef50cc1aece674d752ffecf6962 datapathConfiguration="&{false false false false false }" interface=lxc8a88b813a901 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4bfwq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89a9979c6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4bfwq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89a9979c6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4bfwq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=89a9979c6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=17332 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4bfwq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89a9979c6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=17332 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4bfwq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89a9979c6b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=108 identity=17332 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4bfwq subsys=endpoint level=info msg="Successful endpoint creation" containerID=89a9979c6b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=108 identity=17332 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4bfwq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.204 44bd8ed1-cc0a-447e-be55-8e88b349ad9c default }" containerID=3140d0c4596687519a5f7e51406dea17bac375776b13e199204e036284810d73 datapathConfiguration="&{false false false false false }" interface=lxc2e60869306d7 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-595wn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3140d0c459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-595wn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3140d0c459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-595wn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3140d0c459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=50278 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-595wn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3140d0c459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=50278 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-595wn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3140d0c459 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=724 identity=50278 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-595wn subsys=endpoint level=info msg="Successful endpoint creation" containerID=3140d0c459 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=724 identity=50278 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-595wn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 3fb9d690-0fbf-4b04-952a-bf813136a0f9 default }" containerID=00b09a7a000eeeacc761764cf410bdb4bf48c5d618f5faf7df5a100d9be4eb57 datapathConfiguration="&{false false false false false }" interface=lxc24b45054b1b1 k8sPodName=openstack/pxc-operator-69cb5bbdb9-m76mz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00b09a7a00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m76mz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00b09a7a00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m76mz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00b09a7a00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=57832 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m76mz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=00b09a7a00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=57832 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m76mz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00b09a7a00 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=824 identity=57832 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m76mz subsys=endpoint level=info msg="Successful endpoint creation" containerID=00b09a7a00 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=824 identity=57832 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m76mz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.251 0f4af279-cacf-4907-a236-dc0f7796fdca default }" containerID=c4abb4782890662b70b8009ef8acf3a21bf1cf7eae7c3da61fa6599571fb299a datapathConfiguration="&{false false false false false }" interface=lxc519617e6db24 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4abb47828 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4abb47828 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c4abb47828 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4abb47828 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=18302 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4abb47828 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=18302 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c4abb47828 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=216 identity=18302 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4abb47828 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=216 identity=18302 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.98 61037418-5dd2-4f7c-8318-f4466a65f0a3 default }" containerID=6d0489b742e555fe6dada3188821b2f9c459b3abd90e5557a2c2f3ef7efa434a datapathConfiguration="&{false false false false false }" interface=lxcec93892296ad k8sPodName=local-path-storage/helper-pod-create-pvc-fe4501bc-451b-4735-aac2-a3ea39cb1f45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d0489b742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3022 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe4501bc-451b-4735-aac2-a3ea39cb1f45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d0489b742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3022 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe4501bc-451b-4735-aac2-a3ea39cb1f45 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d0489b742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3022 identity=22721 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe4501bc-451b-4735-aac2-a3ea39cb1f45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d0489b742 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3022 identity=22721 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe4501bc-451b-4735-aac2-a3ea39cb1f45 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6d0489b742 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3022 identity=22721 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe4501bc-451b-4735-aac2-a3ea39cb1f45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d0489b742 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3022 identity=22721 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe4501bc-451b-4735-aac2-a3ea39cb1f45 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6d0489b742 endpointID=3022 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fe4501bc-451b-4735-aac2-a3ea39cb1f45 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6d0489b742 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3022 identity=22721 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe4501bc-451b-4735-aac2-a3ea39cb1f45 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 bdc2b45f-35c6-44c8-94f8-40229dafc154 default }" containerID=cd63f78822312f29de04676790d31b410ca1978ec3d4241a71157a7fb8feaec2 datapathConfiguration="&{false false false false false }" interface=lxcadd78392178b k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd63f78822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd63f78822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cd63f78822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd63f78822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identity=6617 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd63f78822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identity=6617 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd63f78822 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=677 identity=6617 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd63f78822 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=677 identity=6617 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=aa3cd1d7-8b7b-4fb2-adb8-42743bbeecfd] Description:}]" policyAddRequest=9df01c6a-954f-4c52-ae05-ba10bc5cee02 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9df01c6a-954f-4c52-ae05-ba10bc5cee02 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.164 f14f0027-d86a-4421-a2b6-45ea03ae478b default }" containerID=2b3b4b30bccced757e9c2fc526c05d02b58b6dfabfe84f059dbefa96fef4dfe2 datapathConfiguration="&{false false false false false }" interface=lxc84cea928258b k8sPodName=local-path-storage/helper-pod-create-pvc-7f96fa28-8fa5-4ec1-83ef-738f7501a068 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b3b4b30bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7f96fa28-8fa5-4ec1-83ef-738f7501a068 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b3b4b30bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7f96fa28-8fa5-4ec1-83ef-738f7501a068 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b3b4b30bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=22721 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7f96fa28-8fa5-4ec1-83ef-738f7501a068 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b3b4b30bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=22721 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7f96fa28-8fa5-4ec1-83ef-738f7501a068 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b3b4b30bc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=487 identity=22721 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7f96fa28-8fa5-4ec1-83ef-738f7501a068 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b3b4b30bc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=487 identity=22721 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7f96fa28-8fa5-4ec1-83ef-738f7501a068 subsys=daemon level=info msg="Delete endpoint request" containerID=2b3b4b30bc endpointID=487 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7f96fa28-8fa5-4ec1-83ef-738f7501a068 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2b3b4b30bc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=487 identity=22721 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7f96fa28-8fa5-4ec1-83ef-738f7501a068 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 de2365ef-de39-456a-955f-3c1860c01701 default }" containerID=2d08817200a9379084290bbff5dfb6c635dd66b27a09552e29c425b178406921 datapathConfiguration="&{false false false false false }" interface=lxca00c6e3783ee k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d08817200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d08817200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d08817200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identity=21468 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2d08817200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identity=21468 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d08817200 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1622 identity=21468 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d08817200 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1622 identity=21468 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=1bd9fb12-35b4-4b59-8232-ba320bd5e65d] Description:}]" policyAddRequest=f5465bc4-f437-489f-a794-31f81bea2157 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f5465bc4-f437-489f-a794-31f81bea2157 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.91 c7b3c33e-5b6e-4e0c-97d5-588bb3247714 default }" containerID=ee5eb7c9b2ce5b90aa9e43ea1fd3d4b67c045b8e0b6ab487187e76af69f837c4 datapathConfiguration="&{false false false false false }" interface=lxc2f6837fc7000 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee5eb7c9b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 ipv4=10.0.0.91 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee5eb7c9b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.91 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee5eb7c9b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identity=49262 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.91 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee5eb7c9b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identity=49262 ipv4=10.0.0.91 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ee5eb7c9b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=645 identity=49262 ipv4=10.0.0.91 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee5eb7c9b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=645 identity=49262 ipv4=10.0.0.91 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.006296752201496071 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.2 f2593320-742f-48c7-9c63-2e246205b3a7 default }" containerID=03d0c2c238f07efb04d5a68e69334343e500cd5d6bd2094a8111da9a989b1ace datapathConfiguration="&{false false false false false }" interface=lxcf5ff8fed771e k8sPodName=monitoring/node-feature-discovery-worker-8pgqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03d0c2c238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8pgqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03d0c2c238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8pgqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03d0c2c238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 identity=48872 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8pgqk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03d0c2c238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 identity=48872 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8pgqk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03d0c2c238 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1175 identity=48872 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8pgqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=03d0c2c238 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1175 identity=48872 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8pgqk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.198 154828c6-b659-408c-b43a-9cee72479d99 default }" containerID=98a9d1f282c787d184ead552451f11d44d9c7430435c08a59f2b6acf19d438d9 datapathConfiguration="&{false false false false false }" interface=lxcafb9163d395e k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5krhf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98a9d1f282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5krhf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98a9d1f282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5krhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.227 2068d709-0964-42d1-9f9c-9512c034be79 default }" containerID=53d07011556378358e4477ddbfcffe76680e87773706ea092c6d782aa01bf03f datapathConfiguration="&{false false false false false }" interface=lxc974c91e18539 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mcg5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53d0701155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mcg5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53d0701155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mcg5p subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98a9d1f282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identity=54174 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5krhf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98a9d1f282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identity=54174 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5krhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53d0701155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 identity=10657 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mcg5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53d0701155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 identity=10657 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mcg5p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98a9d1f282 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2095 identity=54174 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5krhf subsys=endpoint level=info msg="Successful endpoint creation" containerID=98a9d1f282 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2095 identity=54174 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5krhf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=53d0701155 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2056 identity=10657 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mcg5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=53d0701155 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2056 identity=10657 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mcg5p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 aca9aeb6-5537-43be-8fa6-7a68222c5752 default }" containerID=f1d24ed8c5126a459f525b54ffd82c317538271dd3338d7893718638b71f3d22 datapathConfiguration="&{false false false false false }" interface=lxcf79e28a14f3b k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w6ml7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1d24ed8c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 ipv4=10.0.0.203 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w6ml7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1d24ed8c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.203 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w6ml7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1d24ed8c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 identity=36923 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.203 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w6ml7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1d24ed8c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 identity=36923 ipv4=10.0.0.203 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w6ml7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1d24ed8c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=291 identity=36923 ipv4=10.0.0.203 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w6ml7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1d24ed8c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=291 identity=36923 ipv4=10.0.0.203 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w6ml7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4049 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_04049 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_04049 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_04049 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_04049:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4049 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 c5d75547-f435-4267-940b-89af1ec12da4 default }" containerID=02f6d13ab3c7f2ac36f9f7e857d2e13a8234e46732f02198a944721e441e13f8 datapathConfiguration="&{false false false false false }" interface=lxcc21e660df44a k8sPodName=monitoring/kube-prometheus-stack-admission-create-w6d4p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02f6d13ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3711 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-w6d4p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02f6d13ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3711 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d7d1eaf8-effe-4619-917f-22d93694ed2a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d7d1eaf8-effe-4619-917f-22d93694ed2a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-w6d4p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d7d1eaf8-effe-4619-917f-22d93694ed2a;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d7d1eaf8-effe-4619-917f-22d93694ed2a;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02f6d13ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3711 identity=20378 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d7d1eaf8-effe-4619-917f-22d93694ed2a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d7d1eaf8-effe-4619-917f-22d93694ed2a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-w6d4p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02f6d13ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3711 identity=20378 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-w6d4p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=02f6d13ab3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3711 identity=20378 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-w6d4p subsys=endpoint level=info msg="Successful endpoint creation" containerID=02f6d13ab3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3711 identity=20378 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-w6d4p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=02f6d13ab3 endpointID=3711 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-w6d4p subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d7d1eaf8-effe-4619-917f-22d93694ed2a k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d7d1eaf8-effe-4619-917f-22d93694ed2a k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=02f6d13ab3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3711 identity=20378 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-w6d4p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 84a9c98e-52b3-4211-bb74-595859ba75ea default }" containerID=3f48d52f3a489a9ba63aeddebd73bd08d8446208ab01b3f6c8d9494ae2933949 datapathConfiguration="&{false false false false false }" interface=lxc2be9e07809b3 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rg57c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f48d52f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rg57c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f48d52f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rg57c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.210 79097957-d67e-4e54-9bce-0be056906742 default }" containerID=b915ffcf4128df59c6f31a115fa24b7a9ce1f76fab62aae52d23b3f58ab7f014 datapathConfiguration="&{false false false false false }" interface=lxc228c8662abd8 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-98kbc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b915ffcf41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-98kbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b915ffcf41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-98kbc subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f48d52f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 identity=62840 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rg57c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f48d52f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 identity=62840 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rg57c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b915ffcf41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-98kbc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b915ffcf41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identity=25907 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-98kbc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b915ffcf41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identity=25907 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-98kbc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 42ca5684-d9eb-405f-a953-4c6f990ee7a0 default }" containerID=6d917c364257dfb1571a17b247f4174c265bb9c1a28ecf9537830cdb52a987fb datapathConfiguration="&{false false false false false }" interface=lxc9739d75bb33b k8sPodName=monitoring/kube-prometheus-stack-grafana-5f696f69bd-t495w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d917c3642 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f696f69bd-t495w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d917c3642 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f696f69bd-t495w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d917c3642 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=2538 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f696f69bd-t495w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d917c3642 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=2538 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f696f69bd-t495w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b915ffcf41 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1648 identity=25907 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-98kbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=b915ffcf41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1648 identity=25907 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-98kbc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3f48d52f3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3105 identity=62840 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rg57c subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f48d52f3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3105 identity=62840 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rg57c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6d917c3642 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=289 identity=2538 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f696f69bd-t495w subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d917c3642 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=289 identity=2538 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f696f69bd-t495w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 39a8a406-f4f7-4f6c-a00e-efdc44504414 default }" containerID=1c2cd88a523eb15f4ac7006e35ea8c07dd40b35b888ac85e50d5436aadfd2e40 datapathConfiguration="&{false false false false false }" interface=lxce687fe583872 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cclvx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c2cd88a52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cclvx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c2cd88a52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=fbecadc6-a0fe-4258-b672-8c1758768a27,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=fbecadc6-a0fe-4258-b672-8c1758768a27,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cclvx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=fbecadc6-a0fe-4258-b672-8c1758768a27;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=fbecadc6-a0fe-4258-b672-8c1758768a27;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c2cd88a52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identity=60220 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=fbecadc6-a0fe-4258-b672-8c1758768a27,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=fbecadc6-a0fe-4258-b672-8c1758768a27,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cclvx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c2cd88a52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identity=60220 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cclvx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c2cd88a52 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1435 identity=60220 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cclvx subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c2cd88a52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1435 identity=60220 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cclvx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.228 b05ccae7-275a-4ffa-90a3-07a635cb8dd1 default }" containerID=9139a6134865ce4f3ca124338189d0324aa4fef728ac90cb7f915738c16054c6 datapathConfiguration="&{false false false false false }" interface=lxc9735bf5ad4a4 k8sPodName=local-path-storage/helper-pod-create-pvc-d02ae6d4-eee7-4bcf-b0ae-a5be9ae3e9dc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9139a61348 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d02ae6d4-eee7-4bcf-b0ae-a5be9ae3e9dc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9139a61348 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d02ae6d4-eee7-4bcf-b0ae-a5be9ae3e9dc subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9139a61348 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=22721 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d02ae6d4-eee7-4bcf-b0ae-a5be9ae3e9dc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9139a61348 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=22721 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d02ae6d4-eee7-4bcf-b0ae-a5be9ae3e9dc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9139a61348 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=905 identity=22721 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d02ae6d4-eee7-4bcf-b0ae-a5be9ae3e9dc subsys=endpoint level=info msg="Successful endpoint creation" containerID=9139a61348 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=22721 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d02ae6d4-eee7-4bcf-b0ae-a5be9ae3e9dc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.177 8897da2c-406e-4ddf-b16f-a4bd8ee0b0df default }" containerID=ea26743041ef3045308db39b23b9392ba7d54f2767ac284ddc5254d06022af75 datapathConfiguration="&{false false false false false }" interface=lxc7f5581047ce6 k8sPodName=local-path-storage/helper-pod-create-pvc-534387bd-e598-4e45-8e35-fdd5d613f7b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea26743041 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1432 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-534387bd-e598-4e45-8e35-fdd5d613f7b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea26743041 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1432 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-534387bd-e598-4e45-8e35-fdd5d613f7b2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ea26743041 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1432 identity=22721 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-534387bd-e598-4e45-8e35-fdd5d613f7b2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea26743041 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1432 identity=22721 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-534387bd-e598-4e45-8e35-fdd5d613f7b2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea26743041 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1432 identity=22721 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-534387bd-e598-4e45-8e35-fdd5d613f7b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea26743041 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1432 identity=22721 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-534387bd-e598-4e45-8e35-fdd5d613f7b2 subsys=daemon level=info msg="Delete endpoint request" containerID=1c2cd88a52 endpointID=1435 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-cclvx subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=fbecadc6-a0fe-4258-b672-8c1758768a27 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=fbecadc6-a0fe-4258-b672-8c1758768a27 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1c2cd88a52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1435 identity=60220 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cclvx subsys=endpoint level=info msg="Delete endpoint request" containerID=ea26743041 endpointID=1432 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-534387bd-e598-4e45-8e35-fdd5d613f7b2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=9139a61348 endpointID=905 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d02ae6d4-eee7-4bcf-b0ae-a5be9ae3e9dc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ea26743041 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1432 identity=22721 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-534387bd-e598-4e45-8e35-fdd5d613f7b2 subsys=endpoint level=info msg="Removed endpoint" containerID=9139a61348 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=22721 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d02ae6d4-eee7-4bcf-b0ae-a5be9ae3e9dc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 51f03dd3-ff59-46ca-ad07-d888427a0a99 default }" containerID=601ad8cadd466381a0fe5fec814854acd2ede5f778f07b9ff100287778c51564 datapathConfiguration="&{false false false false false }" interface=lxcf48ffbcdb8c9 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=601ad8cadd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=601ad8cadd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=601ad8cadd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 identity=11053 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=601ad8cadd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 identity=11053 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=601ad8cadd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2089 identity=11053 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=601ad8cadd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2089 identity=11053 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 6fda29ec-538f-4282-bed2-71152ddd6128 default }" containerID=f87ea9551e8dda8d29ca036f284c914ebd01ee0171372a46c47afbdf515e60d1 datapathConfiguration="&{false false false false false }" interface=lxc7d354e6fde19 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f87ea9551e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f87ea9551e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f87ea9551e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=6355 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f87ea9551e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=6355 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f87ea9551e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1039 identity=6355 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f87ea9551e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1039 identity=6355 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.41 bd123038-3ba3-47f4-a5cf-a36066290e87 default }" containerID=2f35669d4518f5048e65ffca416bdb6249531a39ac0c3391c60b43276a49a573 datapathConfiguration="&{false false false false false }" interface=lxc5e72bd788537 k8sPodName=monitoring/loki-gateway-cf54cb88c-hcvc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f35669d45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hcvc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f35669d45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hcvc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2f35669d45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hcvc6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f35669d45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identity=4429 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hcvc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f35669d45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identity=4429 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hcvc6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 59704eed-70fe-4c43-860a-2a1491db017a default }" containerID=4eb555f18f17a736fecd82216e5cdea44ca9550c0e60e9c5681675fe092f1d3d datapathConfiguration="&{false false false false false }" interface=lxc344f7443eff7 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4eb555f18f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2868 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4eb555f18f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2868 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4eb555f18f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2868 identity=33873 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4eb555f18f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2868 identity=33873 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f35669d45 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2135 identity=4429 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hcvc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f35669d45 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2135 identity=4429 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hcvc6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4eb555f18f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2868 identity=33873 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4eb555f18f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2868 identity=33873 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.78 910b99f0-343c-4378-935f-f5d67b34430c default }" containerID=36953f1990f64363a48463ed4d13a61e6a9853b97425ccf60c17eb18d88c7b09 datapathConfiguration="&{false false false false false }" interface=lxcb1406ea01fba k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36953f1990 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36953f1990 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36953f1990 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identity=20726 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36953f1990 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identity=20726 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 fd0002cc-a784-4956-b919-929a6eda47d1 default }" containerID=87e7a34bf8e61d1d407f4456544ad4ae957d19dba6910ebb466ed7a2963fcb8f datapathConfiguration="&{false false false false false }" interface=lxc7c6de12e5253 k8sPodName=local-path-storage/helper-pod-create-pvc-09370ce4-9cfe-4caf-9137-0432b464e20a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87e7a34bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2633 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09370ce4-9cfe-4caf-9137-0432b464e20a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87e7a34bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2633 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09370ce4-9cfe-4caf-9137-0432b464e20a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87e7a34bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2633 identity=22721 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09370ce4-9cfe-4caf-9137-0432b464e20a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87e7a34bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2633 identity=22721 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09370ce4-9cfe-4caf-9137-0432b464e20a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36953f1990 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=347 identity=20726 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=36953f1990 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=347 identity=20726 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=87e7a34bf8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2633 identity=22721 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09370ce4-9cfe-4caf-9137-0432b464e20a subsys=endpoint level=info msg="Successful endpoint creation" containerID=87e7a34bf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2633 identity=22721 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09370ce4-9cfe-4caf-9137-0432b464e20a subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.253 371e7985-16fb-470d-8d5a-23c2ed43d1f1 default }" containerID=fc7753dcd730b92b9751a315d4c0592f3df4385d8b89e63054d8afa908837111 datapathConfiguration="&{false false false false false }" interface=lxcb183d0c688fe k8sPodName=monitoring/vector-h26qk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc7753dcd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3824 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/vector-h26qk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc7753dcd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3824 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/vector-h26qk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc7753dcd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3824 identity=32776 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/vector-h26qk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc7753dcd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3824 identity=32776 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/vector-h26qk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc7753dcd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3824 identity=32776 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/vector-h26qk subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc7753dcd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3824 identity=32776 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/vector-h26qk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=87e7a34bf8 endpointID=2633 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-09370ce4-9cfe-4caf-9137-0432b464e20a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=87e7a34bf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2633 identity=22721 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09370ce4-9cfe-4caf-9137-0432b464e20a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 722ac152-5b35-4aba-b40d-4ce3b6e41571 default }" containerID=b82b17ecf281acc10a948b9598413ed432522dcb05523a144825b22ba6e2c25f datapathConfiguration="&{false false false false false }" interface=lxc90373ad401f2 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b82b17ecf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b82b17ecf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b82b17ecf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b82b17ecf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identity=43080 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b82b17ecf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identity=43080 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b82b17ecf2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=780 identity=43080 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b82b17ecf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=780 identity=43080 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.133 c4b9c3b2-0bc6-4a8d-8667-93fdd6c1f0ea default }" containerID=ae45e4fdb4cf3aea770e4e39325c2c687a237c6ff2ecb564734fca493b4cd0d8 datapathConfiguration="&{false false false false false }" interface=lxc7b37570224aa k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-287tf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae45e4fdb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-287tf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae45e4fdb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-287tf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae45e4fdb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=35241 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-287tf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae45e4fdb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=35241 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-287tf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae45e4fdb4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1777 identity=35241 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-287tf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae45e4fdb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1777 identity=35241 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-287tf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.98 4d95460d-7b66-4843-a513-8eed3221a822 default }" containerID=42491df6b0581a0e885fc76cb392a4dd0bcafeb3822929815e260f2587663267 datapathConfiguration="&{false false false false false }" interface=lxc46e77bc84401 k8sPodName=openstack/memcached-memcached-6479589586-st8pm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42491df6b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-st8pm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42491df6b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-st8pm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42491df6b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=7697 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-st8pm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42491df6b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=7697 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-st8pm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=42491df6b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=191 identity=7697 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-st8pm subsys=endpoint level=info msg="Successful endpoint creation" containerID=42491df6b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=191 identity=7697 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-st8pm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.145 fb148c7a-4db0-4053-b68e-c0168044ad00 default }" containerID=92c784e5c70189076d960b887fb9f1ad7d3b5195bbb99dc11cfd0a1e5e3966ee datapathConfiguration="&{false false false false false }" interface=lxcfd7d47ccbbd6 k8sPodName=local-path-storage/helper-pod-create-pvc-8793dcfd-d6b7-472b-9729-9f2321bf11ed labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92c784e5c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1563 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8793dcfd-d6b7-472b-9729-9f2321bf11ed subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92c784e5c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1563 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8793dcfd-d6b7-472b-9729-9f2321bf11ed subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92c784e5c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1563 identity=22721 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8793dcfd-d6b7-472b-9729-9f2321bf11ed oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92c784e5c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1563 identity=22721 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8793dcfd-d6b7-472b-9729-9f2321bf11ed subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92c784e5c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1563 identity=22721 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8793dcfd-d6b7-472b-9729-9f2321bf11ed subsys=endpoint level=info msg="Successful endpoint creation" containerID=92c784e5c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1563 identity=22721 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8793dcfd-d6b7-472b-9729-9f2321bf11ed subsys=daemon level=info msg="Delete endpoint request" containerID=92c784e5c7 endpointID=1563 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8793dcfd-d6b7-472b-9729-9f2321bf11ed subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=92c784e5c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1563 identity=22721 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8793dcfd-d6b7-472b-9729-9f2321bf11ed subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 3712a43d-ae79-42ac-a23a-260c58a6d64d default }" containerID=eb4bd6d24c562a951a7e3193f0a5df2bd656eb9b918468d574d89c14cded6dcd datapathConfiguration="&{false false false false false }" interface=lxc993c4784e498 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb4bd6d24c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3378 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb4bd6d24c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3378 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb4bd6d24c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3378 identity=45010 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb4bd6d24c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3378 identity=45010 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb4bd6d24c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3378 identity=45010 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb4bd6d24c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3378 identity=45010 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.231 ccf40d13-afaf-4099-9eac-2b53247ce2cb default }" containerID=8a54a37086ca39130664e926aa6f8b8cc3bb6b28ee88dbb2142a388066e875ab datapathConfiguration="&{false false false false false }" interface=lxc930586525372 k8sPodName=openstack/keystone-api-7678ffc6db-qfzsl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a54a37086 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2468 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-api-7678ffc6db-qfzsl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a54a37086 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2468 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-api-7678ffc6db-qfzsl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8a54a37086 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2468 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-api-7678ffc6db-qfzsl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a54a37086 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2468 identity=28671 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-api-7678ffc6db-qfzsl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a54a37086 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2468 identity=28671 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-api-7678ffc6db-qfzsl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 91f14cd5-3e1a-4775-816e-ded8dc03bc37 default }" containerID=e2b397f0cd33ea6ff624bf0cc322d45d5fc50df85ebcb554a27f96eba2105825 datapathConfiguration="&{false false false false false }" interface=lxc6bd49d13876c k8sPodName=openstack/keystone-credential-setup-tr49k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2b397f0cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-tr49k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2b397f0cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fab0bd5f-2b8e-4aa5-ab8b-8cea3e42a681,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=fab0bd5f-2b8e-4aa5-ab8b-8cea3e42a681,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-tr49k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fab0bd5f-2b8e-4aa5-ab8b-8cea3e42a681;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=fab0bd5f-2b8e-4aa5-ab8b-8cea3e42a681;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2b397f0cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identity=780 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fab0bd5f-2b8e-4aa5-ab8b-8cea3e42a681,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=fab0bd5f-2b8e-4aa5-ab8b-8cea3e42a681,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-tr49k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2b397f0cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identity=780 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-tr49k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a54a37086 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2468 identity=28671 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-api-7678ffc6db-qfzsl subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a54a37086 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2468 identity=28671 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-api-7678ffc6db-qfzsl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e2b397f0cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=149 identity=780 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-tr49k subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2b397f0cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=149 identity=780 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-tr49k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e2b397f0cd endpointID=149 k8sNamespace=openstack k8sPodName=keystone-credential-setup-tr49k subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fab0bd5f-2b8e-4aa5-ab8b-8cea3e42a681 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=fab0bd5f-2b8e-4aa5-ab8b-8cea3e42a681 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e2b397f0cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=149 identity=780 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-tr49k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 4d1ec131-5fde-4b75-88d3-5bbf245a3309 default }" containerID=2aca1ec4bff562e5fb9ec11cfa67f8e17bffcef405fb834e7078e039bea533fb datapathConfiguration="&{false false false false false }" interface=lxc16e98c3c7486 k8sPodName=openstack/keystone-db-init-k6d72 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2aca1ec4bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-k6d72 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2aca1ec4bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e85162d6-cd20-480b-90c0-68fccdb22678,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=e85162d6-cd20-480b-90c0-68fccdb22678,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-k6d72 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e85162d6-cd20-480b-90c0-68fccdb22678;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=e85162d6-cd20-480b-90c0-68fccdb22678;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2aca1ec4bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=58264 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e85162d6-cd20-480b-90c0-68fccdb22678,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=e85162d6-cd20-480b-90c0-68fccdb22678,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-k6d72 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2aca1ec4bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=58264 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-k6d72 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2aca1ec4bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=613 identity=58264 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-k6d72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2aca1ec4bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=58264 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-k6d72 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2aca1ec4bf endpointID=613 k8sNamespace=openstack k8sPodName=keystone-db-init-k6d72 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e85162d6-cd20-480b-90c0-68fccdb22678 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=e85162d6-cd20-480b-90c0-68fccdb22678 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2aca1ec4bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=58264 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-k6d72 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 22dd337a-b651-4f61-9f72-df1d93b1370a default }" containerID=23e190a7caa799b1c1373bba74f4f6ac0c14523bf96f1cbde33057979c959870 datapathConfiguration="&{false false false false false }" interface=lxc523ce01f6b2d k8sPodName=openstack/keystone-fernet-setup-s5ttk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23e190a7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-fernet-setup-s5ttk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23e190a7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b8f9f0da-4bc8-48ce-a11a-f7e2636b3c39,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=b8f9f0da-4bc8-48ce-a11a-f7e2636b3c39,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-fernet-setup-s5ttk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b8f9f0da-4bc8-48ce-a11a-f7e2636b3c39;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=b8f9f0da-4bc8-48ce-a11a-f7e2636b3c39;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23e190a7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identity=774 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b8f9f0da-4bc8-48ce-a11a-f7e2636b3c39,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=b8f9f0da-4bc8-48ce-a11a-f7e2636b3c39,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-fernet-setup-s5ttk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=23e190a7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identity=774 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-fernet-setup-s5ttk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23e190a7ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2257 identity=774 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-fernet-setup-s5ttk subsys=endpoint level=info msg="Successful endpoint creation" containerID=23e190a7ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2257 identity=774 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-fernet-setup-s5ttk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=23e190a7ca endpointID=2257 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-s5ttk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b8f9f0da-4bc8-48ce-a11a-f7e2636b3c39 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=b8f9f0da-4bc8-48ce-a11a-f7e2636b3c39 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=23e190a7ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2257 identity=774 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-fernet-setup-s5ttk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 bf938463-f175-48c7-9e6f-597125969a4b default }" containerID=9d6640f93cfac4c9b04f5c99fc6b36b3ee8871498652c65fd5fa3e0fe4098cdb datapathConfiguration="&{false false false false false }" interface=lxc8a06c7e89e21 k8sPodName=openstack/keystone-db-sync-d9h4l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d6640f93c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-sync-d9h4l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d6640f93c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=14bb4ac6-78bc-4d8e-899a-3c44352c0069,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=14bb4ac6-78bc-4d8e-899a-3c44352c0069,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-sync-d9h4l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=14bb4ac6-78bc-4d8e-899a-3c44352c0069;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=14bb4ac6-78bc-4d8e-899a-3c44352c0069;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d6640f93c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 identity=44165 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=14bb4ac6-78bc-4d8e-899a-3c44352c0069,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=14bb4ac6-78bc-4d8e-899a-3c44352c0069,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-sync-d9h4l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d6640f93c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 identity=44165 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-sync-d9h4l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9d6640f93c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1556 identity=44165 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-sync-d9h4l subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d6640f93c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1556 identity=44165 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-sync-d9h4l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9d6640f93c endpointID=1556 k8sNamespace=openstack k8sPodName=keystone-db-sync-d9h4l subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=14bb4ac6-78bc-4d8e-899a-3c44352c0069 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=14bb4ac6-78bc-4d8e-899a-3c44352c0069 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9d6640f93c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1556 identity=44165 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-sync-d9h4l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 b3b832dc-b942-4969-a73b-15370b828b46 default }" containerID=c4d032029d9c9ace2b0e04c25f662a91fec930cb70c1ba447d1b3a0ce1d42def datapathConfiguration="&{false false false false false }" interface=lxcfd5630e23103 k8sPodName=openstack/keystone-rabbit-init-dsrc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4d032029d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/keystone-rabbit-init-dsrc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4d032029d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=028f0f91-6d28-4dfd-a66d-ddb0da795cca,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=028f0f91-6d28-4dfd-a66d-ddb0da795cca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/keystone-rabbit-init-dsrc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=028f0f91-6d28-4dfd-a66d-ddb0da795cca;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=028f0f91-6d28-4dfd-a66d-ddb0da795cca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4d032029d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=12256 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=028f0f91-6d28-4dfd-a66d-ddb0da795cca,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=028f0f91-6d28-4dfd-a66d-ddb0da795cca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/keystone-rabbit-init-dsrc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4d032029d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=12256 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/keystone-rabbit-init-dsrc2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c4d032029d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=832 identity=12256 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/keystone-rabbit-init-dsrc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4d032029d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=832 identity=12256 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/keystone-rabbit-init-dsrc2 subsys=daemon level=info msg="Delete endpoint request" containerID=c4d032029d endpointID=832 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-dsrc2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=028f0f91-6d28-4dfd-a66d-ddb0da795cca k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=028f0f91-6d28-4dfd-a66d-ddb0da795cca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c4d032029d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=832 identity=12256 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/keystone-rabbit-init-dsrc2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 73d4349a-44b1-4d3a-a924-b5825c5786e9 default }" containerID=51270ee450114914d98bad293e2c533fe7118cfe75f1db451a977393500a8d86 datapathConfiguration="&{false false false false false }" interface=lxc3002885a963d k8sPodName=openstack/keystone-domain-manage-sfbck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51270ee450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-sfbck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51270ee450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d1ef7567-92a4-40c5-956d-36aba02b4ff3,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d1ef7567-92a4-40c5-956d-36aba02b4ff3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-sfbck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d1ef7567-92a4-40c5-956d-36aba02b4ff3;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=d1ef7567-92a4-40c5-956d-36aba02b4ff3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51270ee450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=14237 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d1ef7567-92a4-40c5-956d-36aba02b4ff3,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d1ef7567-92a4-40c5-956d-36aba02b4ff3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-sfbck oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51270ee450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=14237 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-sfbck subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51270ee450 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=51 identity=14237 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-sfbck subsys=endpoint level=info msg="Successful endpoint creation" containerID=51270ee450 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=51 identity=14237 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-sfbck subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03444952453095621 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=51270ee450 endpointID=51 k8sNamespace=openstack k8sPodName=keystone-domain-manage-sfbck subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d1ef7567-92a4-40c5-956d-36aba02b4ff3 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=d1ef7567-92a4-40c5-956d-36aba02b4ff3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=51270ee450 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=51 identity=14237 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-sfbck subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 b413ded3-305b-4386-90b2-e87255c9ccf3 default }" containerID=59f4f2e1abebe6d35511fd66aaa52f6f09c5623f1cf14753ff1597c76cc4b443 datapathConfiguration="&{false false false false false }" interface=lxc776a20611d50 k8sPodName=openstack/keystone-bootstrap-79rlv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59f4f2e1ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-79rlv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59f4f2e1ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b914aa25-3955-45d0-bf33-6a0718caa0b9,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b914aa25-3955-45d0-bf33-6a0718caa0b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-79rlv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b914aa25-3955-45d0-bf33-6a0718caa0b9;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b914aa25-3955-45d0-bf33-6a0718caa0b9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=59f4f2e1ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-79rlv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=59f4f2e1ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 identity=7690 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b914aa25-3955-45d0-bf33-6a0718caa0b9,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b914aa25-3955-45d0-bf33-6a0718caa0b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-79rlv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59f4f2e1ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 identity=7690 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-79rlv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59f4f2e1ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2789 identity=7690 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-79rlv subsys=endpoint level=info msg="Successful endpoint creation" containerID=59f4f2e1ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2789 identity=7690 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-79rlv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=59f4f2e1ab endpointID=2789 k8sNamespace=openstack k8sPodName=keystone-bootstrap-79rlv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b914aa25-3955-45d0-bf33-6a0718caa0b9 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b914aa25-3955-45d0-bf33-6a0718caa0b9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=59f4f2e1ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2789 identity=7690 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-bootstrap-79rlv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 bef6a1bd-db7e-49df-a5c1-ba78d7625295 default }" containerID=546b24b85916c154f1257a1bb86279582b1fab4548e44e7b90bc209bc66d66f4 datapathConfiguration="&{false false false false false }" interface=lxc5ca28c5f12a4 k8sPodName=local-path-storage/helper-pod-create-pvc-33303578-ff09-49ef-8df9-845165c10a3c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=546b24b859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3669 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33303578-ff09-49ef-8df9-845165c10a3c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=546b24b859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3669 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33303578-ff09-49ef-8df9-845165c10a3c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=546b24b859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3669 identity=22721 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33303578-ff09-49ef-8df9-845165c10a3c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=546b24b859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3669 identity=22721 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33303578-ff09-49ef-8df9-845165c10a3c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=546b24b859 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3669 identity=22721 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33303578-ff09-49ef-8df9-845165c10a3c subsys=endpoint level=info msg="Successful endpoint creation" containerID=546b24b859 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3669 identity=22721 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33303578-ff09-49ef-8df9-845165c10a3c subsys=daemon level=info msg="Delete endpoint request" containerID=546b24b859 endpointID=3669 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-33303578-ff09-49ef-8df9-845165c10a3c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=546b24b859 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3669 identity=22721 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33303578-ff09-49ef-8df9-845165c10a3c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 52b28456-f6c8-46b8-a307-7c0719e1f7f3 default }" containerID=f57f179d48d28cfccc0525a8e0097118b5d57bd8fa320b804730f5872357c3b7 datapathConfiguration="&{false false false false false }" interface=lxc5cdc57c7db34 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f57f179d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f57f179d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f57f179d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f57f179d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=14435 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f57f179d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=14435 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f57f179d48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=32 identity=14435 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f57f179d48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=32 identity=14435 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 0a401c21-150d-4497-af41-8c2103a3b9a6 default }" containerID=29e68e857dfe2e3beb27a75cede5a44fd84ed8b329878261440ef4f8bc199b17 datapathConfiguration="&{false false false false false }" interface=lxc007d866fa782 k8sPodName=openstack/barbican-api-754c4d669f-6c8zn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29e68e857d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-api-754c4d669f-6c8zn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29e68e857d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-api-754c4d669f-6c8zn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=29e68e857d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-api-754c4d669f-6c8zn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29e68e857d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 identity=50915 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-api-754c4d669f-6c8zn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29e68e857d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 identity=50915 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-api-754c4d669f-6c8zn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 46b77cab-9312-4139-be6d-283291dac2c0 default }" containerID=9880238cd6a56a2343612e5cfbfa60f2ab1763550d018a98cda22c107ba4ed20 datapathConfiguration="&{false false false false false }" interface=lxcc2ae2be61f31 k8sPodName=openstack/barbican-db-init-kg2cg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9880238cd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3920 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-db-init-kg2cg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9880238cd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3920 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cc7aed60-25c7-4be7-bfe8-acb29acac24c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=cc7aed60-25c7-4be7-bfe8-acb29acac24c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-db-init-kg2cg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cc7aed60-25c7-4be7-bfe8-acb29acac24c;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=cc7aed60-25c7-4be7-bfe8-acb29acac24c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9880238cd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3920 identity=5211 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cc7aed60-25c7-4be7-bfe8-acb29acac24c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=cc7aed60-25c7-4be7-bfe8-acb29acac24c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-db-init-kg2cg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9880238cd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3920 identity=5211 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-db-init-kg2cg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29e68e857d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=427 identity=50915 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-api-754c4d669f-6c8zn subsys=endpoint level=info msg="Successful endpoint creation" containerID=29e68e857d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=427 identity=50915 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-api-754c4d669f-6c8zn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9880238cd6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3920 identity=5211 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-db-init-kg2cg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9880238cd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3920 identity=5211 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-db-init-kg2cg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9880238cd6 endpointID=3920 k8sNamespace=openstack k8sPodName=barbican-db-init-kg2cg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cc7aed60-25c7-4be7-bfe8-acb29acac24c k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=cc7aed60-25c7-4be7-bfe8-acb29acac24c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9880238cd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3920 identity=5211 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-db-init-kg2cg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 18e8d64d-b0c3-475d-8c9a-05d820383faf default }" containerID=c3c33cbd9948deee4f0755464a4e36a823a498b10bca29b87b83b3281b06d46b datapathConfiguration="&{false false false false false }" interface=lxc9b1d0ba0635a k8sPodName=openstack/barbican-db-sync-d7pv4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3c33cbd99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-d7pv4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3c33cbd99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8871f2d4-aa3b-4912-afb4-5e861b62efdd,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8871f2d4-aa3b-4912-afb4-5e861b62efdd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-d7pv4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c3c33cbd99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-d7pv4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8871f2d4-aa3b-4912-afb4-5e861b62efdd;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=8871f2d4-aa3b-4912-afb4-5e861b62efdd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3c33cbd99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=1048 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8871f2d4-aa3b-4912-afb4-5e861b62efdd,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8871f2d4-aa3b-4912-afb4-5e861b62efdd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-d7pv4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3c33cbd99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=1048 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-d7pv4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3c33cbd99 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1119 identity=1048 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-d7pv4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3c33cbd99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1119 identity=1048 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-d7pv4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c3c33cbd99 endpointID=1119 k8sNamespace=openstack k8sPodName=barbican-db-sync-d7pv4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8871f2d4-aa3b-4912-afb4-5e861b62efdd k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=8871f2d4-aa3b-4912-afb4-5e861b62efdd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c3c33cbd99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1119 identity=1048 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-d7pv4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 6600e557-99b6-4607-a528-2e95f2069c48 default }" containerID=48d66e9c56b2f4ff8468b26078fd4eb63e99edf2a84a029eb157173bc529450d datapathConfiguration="&{false false false false false }" interface=lxc32d7c5b5e8b9 k8sPodName=openstack/barbican-rabbit-init-x8nph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48d66e9c56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-rabbit-init-x8nph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48d66e9c56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=15445aaa-6d17-4d39-9220-9d3f97807b04,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=15445aaa-6d17-4d39-9220-9d3f97807b04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-rabbit-init-x8nph subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=15445aaa-6d17-4d39-9220-9d3f97807b04;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=15445aaa-6d17-4d39-9220-9d3f97807b04;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48d66e9c56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identity=36658 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=15445aaa-6d17-4d39-9220-9d3f97807b04,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=15445aaa-6d17-4d39-9220-9d3f97807b04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-rabbit-init-x8nph oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=48d66e9c56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identity=36658 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-rabbit-init-x8nph subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48d66e9c56 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3015 identity=36658 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-rabbit-init-x8nph subsys=endpoint level=info msg="Successful endpoint creation" containerID=48d66e9c56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3015 identity=36658 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-rabbit-init-x8nph subsys=daemon level=info msg="Delete endpoint request" containerID=48d66e9c56 endpointID=3015 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-x8nph subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=15445aaa-6d17-4d39-9220-9d3f97807b04 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=15445aaa-6d17-4d39-9220-9d3f97807b04 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=48d66e9c56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3015 identity=36658 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-rabbit-init-x8nph subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 7cb401c4-5c58-430e-8c0c-5968a59069b1 default }" containerID=5744c595836d1a15801cf7b70f7eac4d07574e015135107483b7a7261ef8a1fd datapathConfiguration="&{false false false false false }" interface=lxc337bdb7909e7 k8sPodName=openstack/barbican-ks-service-5zp2p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5744c59583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-5zp2p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5744c59583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7c4ee484-3ffa-4931-b9bd-9c05279cf85e,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=7c4ee484-3ffa-4931-b9bd-9c05279cf85e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-5zp2p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7c4ee484-3ffa-4931-b9bd-9c05279cf85e;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=7c4ee484-3ffa-4931-b9bd-9c05279cf85e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5744c59583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-5zp2p line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5744c59583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=58566 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7c4ee484-3ffa-4931-b9bd-9c05279cf85e,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=7c4ee484-3ffa-4931-b9bd-9c05279cf85e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-5zp2p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5744c59583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=58566 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-5zp2p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5744c59583 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=391 identity=58566 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-5zp2p subsys=endpoint level=info msg="Successful endpoint creation" containerID=5744c59583 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=391 identity=58566 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-5zp2p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5744c59583 endpointID=391 k8sNamespace=openstack k8sPodName=barbican-ks-service-5zp2p subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7c4ee484-3ffa-4931-b9bd-9c05279cf85e k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=7c4ee484-3ffa-4931-b9bd-9c05279cf85e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5744c59583 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=391 identity=58566 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-5zp2p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 17068eb0-cede-4eaa-afda-fe03ee393817 default }" containerID=ca86f31eb303d31a0bb5d392f4df883957cf116a842c52bc7696bd2b5bea459b datapathConfiguration="&{false false false false false }" interface=lxc41bfe4e4865d k8sPodName=openstack/barbican-ks-endpoints-m6ld7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca86f31eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m6ld7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca86f31eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a0954f94-3fa2-4e06-8d7f-593f45365173,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a0954f94-3fa2-4e06-8d7f-593f45365173,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m6ld7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a0954f94-3fa2-4e06-8d7f-593f45365173;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a0954f94-3fa2-4e06-8d7f-593f45365173;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca86f31eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 identity=16096 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a0954f94-3fa2-4e06-8d7f-593f45365173,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a0954f94-3fa2-4e06-8d7f-593f45365173,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m6ld7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ca86f31eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 identity=16096 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m6ld7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca86f31eb3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3336 identity=16096 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m6ld7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca86f31eb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3336 identity=16096 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m6ld7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca86f31eb3 endpointID=3336 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-m6ld7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a0954f94-3fa2-4e06-8d7f-593f45365173 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a0954f94-3fa2-4e06-8d7f-593f45365173 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ca86f31eb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3336 identity=16096 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m6ld7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 8c5e7268-6fea-4d50-8ed9-acc84ef51f5c default }" containerID=e103c114e84bf9b489cd4b09eb0254c49670c58943cc0a45692c0243f40de0aa datapathConfiguration="&{false false false false false }" interface=lxcd1c476b120aa k8sPodName=openstack/barbican-ks-user-42xts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e103c114e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-ks-user-42xts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e103c114e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ebc86edc-f46d-420a-a4ad-85aa336918d7,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=ebc86edc-f46d-420a-a4ad-85aa336918d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-ks-user-42xts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ebc86edc-f46d-420a-a4ad-85aa336918d7;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=ebc86edc-f46d-420a-a4ad-85aa336918d7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e103c114e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identity=47300 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ebc86edc-f46d-420a-a4ad-85aa336918d7,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=ebc86edc-f46d-420a-a4ad-85aa336918d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-ks-user-42xts oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e103c114e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identity=47300 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-ks-user-42xts subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e103c114e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=691 identity=47300 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-ks-user-42xts subsys=endpoint level=info msg="Successful endpoint creation" containerID=e103c114e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=691 identity=47300 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-ks-user-42xts subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e103c114e8 endpointID=691 k8sNamespace=openstack k8sPodName=barbican-ks-user-42xts subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ebc86edc-f46d-420a-a4ad-85aa336918d7 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=ebc86edc-f46d-420a-a4ad-85aa336918d7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e103c114e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=691 identity=47300 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-ks-user-42xts subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.211 b07090ff-bdc2-446c-85f4-cecfada22eef default }" containerID=b95ef1be45236c408b8bfa0645ce24824e8dafeb426fa30834bc20d8d4093e5e datapathConfiguration="&{false false false false false }" interface=lxc3b0514720e7d k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6zhdx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b95ef1be45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6zhdx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b95ef1be45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6zhdx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b95ef1be45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identity=20094 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6zhdx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b95ef1be45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identity=20094 ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6zhdx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b95ef1be45 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1775 identity=20094 ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6zhdx subsys=endpoint level=info msg="Successful endpoint creation" containerID=b95ef1be45 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1775 identity=20094 ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6zhdx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 6e8fc122-1997-4d13-bf8b-11566a1707f9 default }" containerID=69eb31ffd40ac8444e47077fa2b22ac58ec86745ed26338368a1e6b33949a59b datapathConfiguration="&{false false false false false }" interface=lxc1233d5774a90 k8sPodName=openstack/rook-ceph-detect-version-kv5jc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69eb31ffd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kv5jc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69eb31ffd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f44dcfe1-893a-4f96-90ae-9518785d4a22,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f44dcfe1-893a-4f96-90ae-9518785d4a22,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kv5jc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=f44dcfe1-893a-4f96-90ae-9518785d4a22;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=f44dcfe1-893a-4f96-90ae-9518785d4a22;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69eb31ffd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identity=27897 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f44dcfe1-893a-4f96-90ae-9518785d4a22,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f44dcfe1-893a-4f96-90ae-9518785d4a22,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kv5jc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69eb31ffd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identity=27897 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kv5jc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=69eb31ffd4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=68 identity=27897 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kv5jc subsys=endpoint level=info msg="Successful endpoint creation" containerID=69eb31ffd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=68 identity=27897 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kv5jc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=69eb31ffd4 endpointID=68 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-kv5jc subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=f44dcfe1-893a-4f96-90ae-9518785d4a22 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=f44dcfe1-893a-4f96-90ae-9518785d4a22 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=69eb31ffd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=68 identity=27897 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kv5jc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 87a92c6b-d050-4e1d-85a2-9ddcf9459f84 default }" containerID=cebd05b5b4f9bf165eb1b88064de700a8b892bd0cfdb65a70180edaa00d9c2d3 datapathConfiguration="&{false false false false false }" interface=lxc85b2004b2140 k8sPodName=openstack/ceph-object-controller-detect-version-54zp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cebd05b5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-54zp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cebd05b5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=3244fbe3-a53f-445a-8621-f8b42434db67,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=3244fbe3-a53f-445a-8621-f8b42434db67,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-54zp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=3244fbe3-a53f-445a-8621-f8b42434db67;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=3244fbe3-a53f-445a-8621-f8b42434db67;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cebd05b5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identity=10591 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=3244fbe3-a53f-445a-8621-f8b42434db67,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=3244fbe3-a53f-445a-8621-f8b42434db67,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-54zp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cebd05b5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identity=10591 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-54zp7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cebd05b5b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=781 identity=10591 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-54zp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cebd05b5b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=781 identity=10591 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-54zp7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cebd05b5b4 endpointID=781 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-54zp7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=3244fbe3-a53f-445a-8621-f8b42434db67 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=3244fbe3-a53f-445a-8621-f8b42434db67 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=cebd05b5b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=781 identity=10591 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-54zp7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 b724872b-c503-4433-aa52-095accad0886 default }" containerID=64c04e689eff45af42072dd7a20694dd57453c5627686bc375d77502e5f4daec datapathConfiguration="&{false false false false false }" interface=lxcc6e66082e352 k8sPodName=local-path-storage/helper-pod-create-pvc-6e494418-f2a6-4362-bea4-9b9f8917de7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64c04e689e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e494418-f2a6-4362-bea4-9b9f8917de7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64c04e689e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e494418-f2a6-4362-bea4-9b9f8917de7d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64c04e689e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 identity=22721 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e494418-f2a6-4362-bea4-9b9f8917de7d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64c04e689e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 identity=22721 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e494418-f2a6-4362-bea4-9b9f8917de7d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64c04e689e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1819 identity=22721 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e494418-f2a6-4362-bea4-9b9f8917de7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=64c04e689e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1819 identity=22721 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e494418-f2a6-4362-bea4-9b9f8917de7d subsys=daemon level=info msg="Delete endpoint request" containerID=64c04e689e endpointID=1819 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6e494418-f2a6-4362-bea4-9b9f8917de7d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=64c04e689e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1819 identity=22721 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e494418-f2a6-4362-bea4-9b9f8917de7d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 5a0af135-7404-4895-b155-87bff3aab86d default }" containerID=37d38f16d9f68aa333160d8a933c649559e1958c3ff5baf861d6cbe90351bbb1 datapathConfiguration="&{false false false false false }" interface=lxcf8133c32692a k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37d38f16d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37d38f16d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=37d38f16d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37d38f16d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identity=21905 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37d38f16d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identity=21905 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37d38f16d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1072 identity=21905 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=37d38f16d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1072 identity=21905 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.232 640678de-f391-40d9-9336-8e41a359df30 default }" containerID=839a885aba4355037242725ad3607dfa5b06f09be0665701ea55a06b057ca4b1 datapathConfiguration="&{false false false false false }" interface=lxc2946d117d531 k8sPodName=openstack/glance-db-init-fshll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=839a885aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-db-init-fshll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=839a885aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9b3a8142-6389-4d8f-999f-08c7a13f5b7d,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9b3a8142-6389-4d8f-999f-08c7a13f5b7d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-db-init-fshll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=839a885aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-db-init-fshll line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9b3a8142-6389-4d8f-999f-08c7a13f5b7d;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=9b3a8142-6389-4d8f-999f-08c7a13f5b7d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=839a885aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identity=8203 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9b3a8142-6389-4d8f-999f-08c7a13f5b7d,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9b3a8142-6389-4d8f-999f-08c7a13f5b7d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-db-init-fshll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=839a885aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identity=8203 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-db-init-fshll subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=839a885aba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2856 identity=8203 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-db-init-fshll subsys=endpoint level=info msg="Successful endpoint creation" containerID=839a885aba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2856 identity=8203 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-db-init-fshll subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.99 934b8b53-6e1d-480f-ae4d-e02b9d06cae8 default }" containerID=e633739d37b8b592e699ffd97cab2dc77ecd4d2547bc23fc51568c7180edde94 datapathConfiguration="&{false false false false false }" interface=lxc00836e030770 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z66qt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e633739d37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3762 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z66qt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e633739d37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3762 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z66qt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e633739d37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3762 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z66qt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e633739d37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3762 identity=14345 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z66qt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e633739d37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3762 identity=14345 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z66qt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 020c5156-c03a-437a-ade3-9ee4e1367950 default }" containerID=a965b329cf50d06ffc85e52833fab0ee60ea808e47af734a7918789e8f9e79a9 datapathConfiguration="&{false false false false false }" interface=lxc8fb0eb56b1aa k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-252j5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a965b329cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3705 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-252j5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a965b329cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3705 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-252j5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a965b329cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3705 identity=36610 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-252j5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a965b329cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3705 identity=36610 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-252j5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e633739d37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3762 identity=14345 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z66qt subsys=endpoint level=info msg="Successful endpoint creation" containerID=e633739d37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3762 identity=14345 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z66qt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a965b329cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3705 identity=36610 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-252j5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a965b329cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3705 identity=36610 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-252j5 subsys=daemon level=info msg="Delete endpoint request" containerID=839a885aba endpointID=2856 k8sNamespace=openstack k8sPodName=glance-db-init-fshll subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9b3a8142-6389-4d8f-999f-08c7a13f5b7d k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=9b3a8142-6389-4d8f-999f-08c7a13f5b7d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Removed endpoint" containerID=839a885aba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2856 identity=8203 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-db-init-fshll subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.142 9c64f8f5-24f0-4d38-9a08-4ef048ba37e3 default }" containerID=1fc9b483ad7c11294dbfa46af3acc92558028fb5bf28de89f280fe3070343e5e datapathConfiguration="&{false false false false false }" interface=lxcfe099dcbd6cf k8sPodName=openstack/glance-db-sync-r5wbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fc9b483ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-db-sync-r5wbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fc9b483ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=201cc963-3d5d-46a4-9d5a-f8434cc96e14,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=201cc963-3d5d-46a4-9d5a-f8434cc96e14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-db-sync-r5wbn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1fc9b483ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-db-sync-r5wbn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=201cc963-3d5d-46a4-9d5a-f8434cc96e14;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=201cc963-3d5d-46a4-9d5a-f8434cc96e14;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1fc9b483ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identity=46158 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=201cc963-3d5d-46a4-9d5a-f8434cc96e14,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=201cc963-3d5d-46a4-9d5a-f8434cc96e14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-db-sync-r5wbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fc9b483ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identity=46158 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-db-sync-r5wbn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1fc9b483ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3217 identity=46158 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-db-sync-r5wbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fc9b483ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3217 identity=46158 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-db-sync-r5wbn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1fc9b483ad endpointID=3217 k8sNamespace=openstack k8sPodName=glance-db-sync-r5wbn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=201cc963-3d5d-46a4-9d5a-f8434cc96e14 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=201cc963-3d5d-46a4-9d5a-f8434cc96e14 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1fc9b483ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3217 identity=46158 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-db-sync-r5wbn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 09178461-0351-42a3-8b76-0d0739c18fc2 default }" containerID=5534d0d8c524faa764fcf9921a00f2d50adff0a1b80c0822bba263590a5a9ec2 datapathConfiguration="&{false false false false false }" interface=lxc25dd24e0df16 k8sPodName=openstack/glance-rabbit-init-9ddf6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5534d0d8c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3402 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-rabbit-init-9ddf6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5534d0d8c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3402 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=89cc3fd6-8cd6-419d-b667-2c5b7cdb0a81,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=89cc3fd6-8cd6-419d-b667-2c5b7cdb0a81,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-rabbit-init-9ddf6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=89cc3fd6-8cd6-419d-b667-2c5b7cdb0a81;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=89cc3fd6-8cd6-419d-b667-2c5b7cdb0a81;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5534d0d8c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3402 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-rabbit-init-9ddf6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5534d0d8c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3402 identity=47536 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=89cc3fd6-8cd6-419d-b667-2c5b7cdb0a81,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=89cc3fd6-8cd6-419d-b667-2c5b7cdb0a81,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-rabbit-init-9ddf6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5534d0d8c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3402 identity=47536 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-rabbit-init-9ddf6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5534d0d8c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3402 identity=47536 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-rabbit-init-9ddf6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5534d0d8c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3402 identity=47536 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-rabbit-init-9ddf6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5534d0d8c5 endpointID=3402 k8sNamespace=openstack k8sPodName=glance-rabbit-init-9ddf6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=89cc3fd6-8cd6-419d-b667-2c5b7cdb0a81 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=89cc3fd6-8cd6-419d-b667-2c5b7cdb0a81 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5534d0d8c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3402 identity=47536 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-rabbit-init-9ddf6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 50e1d117-2b94-421f-aa61-351e96141798 default }" containerID=231fa99ac50bc104543c4d18380d7af9858ad6d2322358a4b3fdefd19425b15c datapathConfiguration="&{false false false false false }" interface=lxcea205b9ab289 k8sPodName=openstack/glance-ks-service-t4752 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=231fa99ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-ks-service-t4752 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=231fa99ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=83a1cbf1-2364-46fe-8fff-80e354fba230,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=83a1cbf1-2364-46fe-8fff-80e354fba230,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-ks-service-t4752 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=83a1cbf1-2364-46fe-8fff-80e354fba230;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=83a1cbf1-2364-46fe-8fff-80e354fba230;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=231fa99ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=19675 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=83a1cbf1-2364-46fe-8fff-80e354fba230,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=83a1cbf1-2364-46fe-8fff-80e354fba230,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-ks-service-t4752 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=231fa99ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=19675 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-ks-service-t4752 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=231fa99ac5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=719 identity=19675 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-ks-service-t4752 subsys=endpoint level=info msg="Successful endpoint creation" containerID=231fa99ac5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=719 identity=19675 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-ks-service-t4752 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=231fa99ac5 endpointID=719 k8sNamespace=openstack k8sPodName=glance-ks-service-t4752 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=83a1cbf1-2364-46fe-8fff-80e354fba230 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=83a1cbf1-2364-46fe-8fff-80e354fba230 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=231fa99ac5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=719 identity=19675 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-ks-service-t4752 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 4322e5e2-3efd-4d60-90c2-8573f5fb14e9 default }" containerID=2f2ac0e4fef256270c5e81714191a2839e9713a38aebd6c8e508a74b7b556aaa datapathConfiguration="&{false false false false false }" interface=lxcc579e11670b7 k8sPodName=openstack/glance-ks-endpoints-phkvd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f2ac0e4fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2247 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-phkvd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f2ac0e4fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2247 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=206a6cbe-a5f5-456e-8358-7940d2341149,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=206a6cbe-a5f5-456e-8358-7940d2341149,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-phkvd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2f2ac0e4fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2247 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-phkvd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=206a6cbe-a5f5-456e-8358-7940d2341149;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=206a6cbe-a5f5-456e-8358-7940d2341149;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f2ac0e4fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2247 identity=45852 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=206a6cbe-a5f5-456e-8358-7940d2341149,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=206a6cbe-a5f5-456e-8358-7940d2341149,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-phkvd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f2ac0e4fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2247 identity=45852 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-phkvd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f2ac0e4fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2247 identity=45852 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-phkvd subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f2ac0e4fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2247 identity=45852 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-phkvd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2f2ac0e4fe endpointID=2247 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-phkvd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=206a6cbe-a5f5-456e-8358-7940d2341149 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=206a6cbe-a5f5-456e-8358-7940d2341149 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2f2ac0e4fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2247 identity=45852 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-phkvd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 1a80b251-bfed-4855-95fa-3d71d9157846 default }" containerID=f1f38fde3136d8d2949d4b2ce2654057bcd160d2ac557b9fac59cff7464bc006 datapathConfiguration="&{false false false false false }" interface=lxca4c48f41f6b5 k8sPodName=openstack/glance-ks-user-5x44t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1f38fde31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-5x44t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1f38fde31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=571d6d8a-4613-437c-86a0-60b9a9101405,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=571d6d8a-4613-437c-86a0-60b9a9101405,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-5x44t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=571d6d8a-4613-437c-86a0-60b9a9101405;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=571d6d8a-4613-437c-86a0-60b9a9101405;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1f38fde31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identity=11148 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=571d6d8a-4613-437c-86a0-60b9a9101405,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=571d6d8a-4613-437c-86a0-60b9a9101405,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-5x44t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1f38fde31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identity=11148 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-5x44t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f1f38fde31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=503 identity=11148 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-5x44t subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1f38fde31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=503 identity=11148 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-5x44t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f1f38fde31 endpointID=503 k8sNamespace=openstack k8sPodName=glance-ks-user-5x44t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=571d6d8a-4613-437c-86a0-60b9a9101405 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=571d6d8a-4613-437c-86a0-60b9a9101405 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f1f38fde31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=503 identity=11148 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-5x44t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 8c8fa2ec-fc71-4491-b3ab-bc7df55a3bfc default }" containerID=9fe841ed12186eae462a4b4bb8a86f0a313c8baba234f65c759f90c236b2bdd0 datapathConfiguration="&{false false false false false }" interface=lxc5b96b49d388e k8sPodName=openstack/glance-metadefs-load-pbchb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fe841ed12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-metadefs-load-pbchb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fe841ed12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=de7aaca1-2344-42cc-a0f3-dd1f46ef15d0,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=de7aaca1-2344-42cc-a0f3-dd1f46ef15d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-metadefs-load-pbchb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9fe841ed12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-metadefs-load-pbchb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=de7aaca1-2344-42cc-a0f3-dd1f46ef15d0;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=de7aaca1-2344-42cc-a0f3-dd1f46ef15d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9fe841ed12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=12598 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=de7aaca1-2344-42cc-a0f3-dd1f46ef15d0,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=de7aaca1-2344-42cc-a0f3-dd1f46ef15d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-metadefs-load-pbchb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fe841ed12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=12598 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-metadefs-load-pbchb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9fe841ed12 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=182 identity=12598 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-metadefs-load-pbchb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fe841ed12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=182 identity=12598 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-metadefs-load-pbchb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9fe841ed12 endpointID=182 k8sNamespace=openstack k8sPodName=glance-metadefs-load-pbchb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=de7aaca1-2344-42cc-a0f3-dd1f46ef15d0 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=de7aaca1-2344-42cc-a0f3-dd1f46ef15d0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9fe841ed12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=182 identity=12598 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-metadefs-load-pbchb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 4abd6a37-d7bd-454b-9d89-b703ff1ed776 default }" containerID=ed99aa323654634ea5595c0febe5905d036d8bdcd9019883d754ab82f39a9492 datapathConfiguration="&{false false false false false }" interface=lxc995b1ad9a483 k8sPodName=openstack/glance-storage-init-sntl5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed99aa3236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-sntl5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed99aa3236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7d9340bf-a226-4c2d-a6bf-939597e732f6,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=7d9340bf-a226-4c2d-a6bf-939597e732f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-sntl5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7d9340bf-a226-4c2d-a6bf-939597e732f6;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=7d9340bf-a226-4c2d-a6bf-939597e732f6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed99aa3236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 identity=16030 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7d9340bf-a226-4c2d-a6bf-939597e732f6,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=7d9340bf-a226-4c2d-a6bf-939597e732f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-sntl5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ed99aa3236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 identity=16030 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-sntl5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed99aa3236 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3293 identity=16030 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-sntl5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed99aa3236 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3293 identity=16030 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-sntl5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed99aa3236 endpointID=3293 k8sNamespace=openstack k8sPodName=glance-storage-init-sntl5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7d9340bf-a226-4c2d-a6bf-939597e732f6 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=7d9340bf-a226-4c2d-a6bf-939597e732f6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ed99aa3236 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3293 identity=16030 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-sntl5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 e9c5becb-ff25-4aee-b0e6-344a1c459442 default }" containerID=d0bb88aea46968165896525e358646ff1d3ddb61a3d90aac55a6bf440f1c0e02 datapathConfiguration="&{false false false false false }" interface=lxc4b96394d4795 k8sPodName=openstack/glance-api-66886d6b89-h874n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0bb88aea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-api-66886d6b89-h874n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0bb88aea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-api-66886d6b89-h874n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0bb88aea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=20941 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-api-66886d6b89-h874n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0bb88aea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=20941 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-api-66886d6b89-h874n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d0bb88aea4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2482 identity=20941 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-api-66886d6b89-h874n subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0bb88aea4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2482 identity=20941 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-api-66886d6b89-h874n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.182 ff2c236e-c402-43a1-a24f-17f8b1d2377e default }" containerID=79169d76d1d396c852004a0c896bf16a67cb41c0b7fa3e3e34bd38984affbd35 datapathConfiguration="&{false false false false false }" interface=lxc8fc14d13d2fd k8sPodName=openstack/staffeln-conductor-c86d54d57-zxtwt labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.149 edb03ba6-07e2-4a5f-8d04-408e19a454ce default }" containerID=9f5fc2530148055c15032159395b33f4b61d3fa694e7648b271d8a19f73e48c1 datapathConfiguration="&{false false false false false }" interface=lxcea1aa1652072 k8sPodName=openstack/staffeln-api-55c4d4749d-76rgr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79169d76d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-conductor-c86d54d57-zxtwt subsys=endpoint level=info msg="New endpoint" containerID=9f5fc25301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-55c4d4749d-76rgr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79169d76d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-conductor-c86d54d57-zxtwt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=9f5fc25301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-55c4d4749d-76rgr subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=79169d76d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-conductor-c86d54d57-zxtwt line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=9f5fc25301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-55c4d4749d-76rgr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=79169d76d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=2625 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-conductor-c86d54d57-zxtwt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79169d76d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=2625 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-conductor-c86d54d57-zxtwt subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f5fc25301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identity=29855 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-55c4d4749d-76rgr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f5fc25301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identity=29855 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-55c4d4749d-76rgr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 32fec1da-6aa0-4683-88a6-451d52e78c10 default }" containerID=a02b9a5469488a0d84e225ea9e78562d493552cfb1509b9d69530853e3bbee2e datapathConfiguration="&{false false false false false }" interface=lxcf1af7970525a k8sPodName=openstack/staffeln-db-init-htp7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a02b9a5469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-htp7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a02b9a5469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5ac1cd77-7e73-4870-9c87-5e1765012933,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5ac1cd77-7e73-4870-9c87-5e1765012933,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-htp7h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5ac1cd77-7e73-4870-9c87-5e1765012933;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=5ac1cd77-7e73-4870-9c87-5e1765012933;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a02b9a5469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identity=11259 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5ac1cd77-7e73-4870-9c87-5e1765012933,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5ac1cd77-7e73-4870-9c87-5e1765012933,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-htp7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a02b9a5469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identity=11259 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-htp7h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79169d76d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=110 identity=2625 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-conductor-c86d54d57-zxtwt subsys=endpoint level=info msg="Successful endpoint creation" containerID=79169d76d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=110 identity=2625 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-conductor-c86d54d57-zxtwt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9f5fc25301 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3739 identity=29855 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-55c4d4749d-76rgr subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f5fc25301 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3739 identity=29855 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-55c4d4749d-76rgr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a02b9a5469 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=605 identity=11259 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-htp7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=a02b9a5469 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=605 identity=11259 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-htp7h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a02b9a5469 endpointID=605 k8sNamespace=openstack k8sPodName=staffeln-db-init-htp7h subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=5ac1cd77-7e73-4870-9c87-5e1765012933 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=5ac1cd77-7e73-4870-9c87-5e1765012933 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=a02b9a5469 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=605 identity=11259 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-htp7h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 73cd5343-291e-4f8f-97de-f360b55dea60 default }" containerID=28307e626ab522e6175e43be21db2f279fce742254008e97fb768db129e6996e datapathConfiguration="&{false false false false false }" interface=lxcc21be51175dc k8sPodName=openstack/staffeln-db-sync-2chvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28307e626a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-sync-2chvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28307e626a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b6ae6d38-36fc-4732-9ff6-0647c23ca818,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=b6ae6d38-36fc-4732-9ff6-0647c23ca818,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-sync-2chvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=b6ae6d38-36fc-4732-9ff6-0647c23ca818;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=b6ae6d38-36fc-4732-9ff6-0647c23ca818;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28307e626a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identity=13811 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b6ae6d38-36fc-4732-9ff6-0647c23ca818,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=b6ae6d38-36fc-4732-9ff6-0647c23ca818,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-sync-2chvk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=28307e626a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identity=13811 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-sync-2chvk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28307e626a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1302 identity=13811 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-sync-2chvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=28307e626a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1302 identity=13811 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-sync-2chvk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=28307e626a endpointID=1302 k8sNamespace=openstack k8sPodName=staffeln-db-sync-2chvk subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=b6ae6d38-36fc-4732-9ff6-0647c23ca818 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=b6ae6d38-36fc-4732-9ff6-0647c23ca818 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=28307e626a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1302 identity=13811 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-sync-2chvk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 514dc371-01a0-4198-ba8d-6c353eb8fb70 default }" containerID=569e3d37d33e780f129a431a436d257356363db967c79c04b7f27788ead4a54e datapathConfiguration="&{false false false false false }" interface=lxc59012418bede k8sPodName=local-path-storage/helper-pod-create-pvc-f91ec9fb-791e-4a94-8e5c-8ebdc49564b5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=569e3d37d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3000 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f91ec9fb-791e-4a94-8e5c-8ebdc49564b5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=569e3d37d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3000 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f91ec9fb-791e-4a94-8e5c-8ebdc49564b5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=569e3d37d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3000 identity=22721 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f91ec9fb-791e-4a94-8e5c-8ebdc49564b5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=569e3d37d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3000 identity=22721 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f91ec9fb-791e-4a94-8e5c-8ebdc49564b5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=569e3d37d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3000 identity=22721 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f91ec9fb-791e-4a94-8e5c-8ebdc49564b5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=569e3d37d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3000 identity=22721 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f91ec9fb-791e-4a94-8e5c-8ebdc49564b5 subsys=daemon level=info msg="Delete endpoint request" containerID=569e3d37d3 endpointID=3000 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f91ec9fb-791e-4a94-8e5c-8ebdc49564b5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=569e3d37d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3000 identity=22721 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f91ec9fb-791e-4a94-8e5c-8ebdc49564b5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 867bddbc-7252-4b0b-8713-9b38a9992b7d default }" containerID=651e434f2ed2ba7355edfd0c263ae9fd6ed22b5b41c2d6687f7b0df28bf450ba datapathConfiguration="&{false false false false false }" interface=lxcd88f04dc4909 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=651e434f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=651e434f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=651e434f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 identity=8409 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=651e434f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 identity=8409 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=651e434f2e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=679 identity=8409 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=651e434f2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=679 identity=8409 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.45 c68916c7-b712-43f2-ba35-4a8d10f6d9df default }" containerID=d393e9716dda0407637afd97df13e4c4abd73db0ddd0fc664138ae9346f23696 datapathConfiguration="&{false false false false false }" interface=lxc99bb5198c162 k8sPodName=openstack/cinder-scheduler-7d57f864fc-bm4hh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d393e9716d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-scheduler-7d57f864fc-bm4hh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 7c0342bd-3952-456a-ace1-65d2f454d15c default }" containerID=23e118e3399c690774b203a8754e57d418d115b1877e40c69e53fee25384be65 datapathConfiguration="&{false false false false false }" interface=lxcc8b6c99132fa k8sPodName=openstack/cinder-api-6777d67fff-bn6qt labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=d393e9716d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-scheduler-7d57f864fc-bm4hh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=23e118e339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/cinder-api-6777d67fff-bn6qt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23e118e339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/cinder-api-6777d67fff-bn6qt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d393e9716d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-scheduler-7d57f864fc-bm4hh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d393e9716d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=18080 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-scheduler-7d57f864fc-bm4hh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d393e9716d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=18080 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-scheduler-7d57f864fc-bm4hh subsys=endpoint level=info msg="Invalid state transition skipped" containerID=23e118e339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=openstack/cinder-api-6777d67fff-bn6qt line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23e118e339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identity=35668 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/cinder-api-6777d67fff-bn6qt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23e118e339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identity=35668 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/cinder-api-6777d67fff-bn6qt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 2821586a-cf18-44b5-90bd-ae7195cf80ba default }" containerID=fe6409c3cdb1b0a9304116c4806fb875746bc6f976da2e638d9b01232e191874 datapathConfiguration="&{false false false false false }" interface=lxcb7b41a8f9bd1 k8sPodName=openstack/cinder-db-init-kj4sp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe6409c3cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-db-init-kj4sp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe6409c3cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e4c711e0-85c5-41eb-9304-c21945025747,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=e4c711e0-85c5-41eb-9304-c21945025747,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-db-init-kj4sp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e4c711e0-85c5-41eb-9304-c21945025747;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=e4c711e0-85c5-41eb-9304-c21945025747;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe6409c3cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=22953 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e4c711e0-85c5-41eb-9304-c21945025747,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=e4c711e0-85c5-41eb-9304-c21945025747,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-db-init-kj4sp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe6409c3cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=22953 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-db-init-kj4sp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d393e9716d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=880 identity=18080 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-scheduler-7d57f864fc-bm4hh subsys=endpoint level=info msg="Successful endpoint creation" containerID=d393e9716d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=880 identity=18080 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/cinder-scheduler-7d57f864fc-bm4hh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=23e118e339 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2891 identity=35668 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/cinder-api-6777d67fff-bn6qt subsys=endpoint level=info msg="Successful endpoint creation" containerID=23e118e339 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2891 identity=35668 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/cinder-api-6777d67fff-bn6qt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fe6409c3cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=367 identity=22953 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-db-init-kj4sp subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe6409c3cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=22953 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-db-init-kj4sp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe6409c3cd endpointID=367 k8sNamespace=openstack k8sPodName=cinder-db-init-kj4sp subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e4c711e0-85c5-41eb-9304-c21945025747 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=e4c711e0-85c5-41eb-9304-c21945025747 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=fe6409c3cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=22953 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-db-init-kj4sp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 acca5b8b-a3d1-4502-b9ef-054e6da352a9 default }" containerID=e31322f2fa8fd7b7ebb988f17d7224f73dcea8f1240a39ffc22e9cdea63fed52 datapathConfiguration="&{false false false false false }" interface=lxc359394048d7c k8sPodName=openstack/cinder-db-sync-9xc42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e31322f2fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/cinder-db-sync-9xc42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e31322f2fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2d6c9abb-3afa-4fa3-8ca8-55535e619259,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=2d6c9abb-3afa-4fa3-8ca8-55535e619259,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/cinder-db-sync-9xc42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=2d6c9abb-3afa-4fa3-8ca8-55535e619259;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=2d6c9abb-3afa-4fa3-8ca8-55535e619259;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e31322f2fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identity=12761 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2d6c9abb-3afa-4fa3-8ca8-55535e619259,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=2d6c9abb-3afa-4fa3-8ca8-55535e619259,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/cinder-db-sync-9xc42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e31322f2fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identity=12761 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/cinder-db-sync-9xc42 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e31322f2fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=524 identity=12761 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/cinder-db-sync-9xc42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e31322f2fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=524 identity=12761 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/cinder-db-sync-9xc42 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e31322f2fa endpointID=524 k8sNamespace=openstack k8sPodName=cinder-db-sync-9xc42 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=2d6c9abb-3afa-4fa3-8ca8-55535e619259 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=2d6c9abb-3afa-4fa3-8ca8-55535e619259 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e31322f2fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=524 identity=12761 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/cinder-db-sync-9xc42 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 795d9244-0abe-41d2-a783-b08eba154fb9 default }" containerID=f6fdb6786941b6e22deab51fa80a73a528f65ea73490508e5f2a8a178fa2058d datapathConfiguration="&{false false false false false }" interface=lxcfbfa93b0d080 k8sPodName=openstack/cinder-rabbit-init-ntx69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6fdb67869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-rabbit-init-ntx69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6fdb67869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=98dec87c-0ed7-40f3-844a-98b10151b4fe,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=98dec87c-0ed7-40f3-844a-98b10151b4fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-rabbit-init-ntx69 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f6fdb67869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-rabbit-init-ntx69 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=98dec87c-0ed7-40f3-844a-98b10151b4fe;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=98dec87c-0ed7-40f3-844a-98b10151b4fe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6fdb67869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identity=40425 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=98dec87c-0ed7-40f3-844a-98b10151b4fe,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=98dec87c-0ed7-40f3-844a-98b10151b4fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-rabbit-init-ntx69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6fdb67869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identity=40425 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-rabbit-init-ntx69 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6fdb67869 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=388 identity=40425 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-rabbit-init-ntx69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6fdb67869 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=388 identity=40425 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-rabbit-init-ntx69 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6fdb67869 endpointID=388 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-ntx69 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=98dec87c-0ed7-40f3-844a-98b10151b4fe k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=98dec87c-0ed7-40f3-844a-98b10151b4fe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f6fdb67869 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=388 identity=40425 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-rabbit-init-ntx69 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 5e66f790-bec4-422d-9ebe-b48b5a33d155 default }" containerID=49d11fc82be08c62868ec88caf0331967fa39d7d078455151e69744ba6152ea4 datapathConfiguration="&{false false false false false }" interface=lxc4f134c380868 k8sPodName=openstack/cinder-ks-service-tzxjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49d11fc82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-service-tzxjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49d11fc82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a4a6642c-85d6-4022-bbd8-4f7a700b4476,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=a4a6642c-85d6-4022-bbd8-4f7a700b4476,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-service-tzxjx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a4a6642c-85d6-4022-bbd8-4f7a700b4476;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=a4a6642c-85d6-4022-bbd8-4f7a700b4476;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49d11fc82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 identity=4079 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a4a6642c-85d6-4022-bbd8-4f7a700b4476,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=a4a6642c-85d6-4022-bbd8-4f7a700b4476,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-service-tzxjx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=49d11fc82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 identity=4079 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-service-tzxjx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49d11fc82b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1986 identity=4079 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-service-tzxjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=49d11fc82b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1986 identity=4079 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-service-tzxjx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=49d11fc82b endpointID=1986 k8sNamespace=openstack k8sPodName=cinder-ks-service-tzxjx subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a4a6642c-85d6-4022-bbd8-4f7a700b4476 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=a4a6642c-85d6-4022-bbd8-4f7a700b4476 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=49d11fc82b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1986 identity=4079 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-service-tzxjx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 c7ecc5d9-a3cb-463d-88f3-f0420cd8e97c default }" containerID=a75436f287170c326f48b5272254c56af5d4f3a215aecbf45b7691e3e742ca23 datapathConfiguration="&{false false false false false }" interface=lxc70114ec7eab5 k8sPodName=openstack/cinder-ks-endpoints-lllcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a75436f287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3710 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-ks-endpoints-lllcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a75436f287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3710 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=6efd5bef-a192-44a0-9109-19dea11def23,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6efd5bef-a192-44a0-9109-19dea11def23,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-ks-endpoints-lllcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a75436f287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3710 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-ks-endpoints-lllcw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=6efd5bef-a192-44a0-9109-19dea11def23;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6efd5bef-a192-44a0-9109-19dea11def23;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a75436f287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3710 identity=35027 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=6efd5bef-a192-44a0-9109-19dea11def23,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6efd5bef-a192-44a0-9109-19dea11def23,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-ks-endpoints-lllcw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a75436f287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3710 identity=35027 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-ks-endpoints-lllcw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a75436f287 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3710 identity=35027 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-ks-endpoints-lllcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=a75436f287 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3710 identity=35027 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-ks-endpoints-lllcw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a75436f287 endpointID=3710 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-lllcw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=6efd5bef-a192-44a0-9109-19dea11def23 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6efd5bef-a192-44a0-9109-19dea11def23 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=a75436f287 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3710 identity=35027 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-ks-endpoints-lllcw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 d60cbc86-2b48-49ab-80b7-69fcb8785f1f default }" containerID=c9e0ad9ee4c8014e974486e2af39ba40720bede853affd495f224055be3e7198 datapathConfiguration="&{false false false false false }" interface=lxc3aabd58892d7 k8sPodName=openstack/cinder-ks-user-bjsxs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9e0ad9ee4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/cinder-ks-user-bjsxs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9e0ad9ee4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=098c1284-d575-4d57-8b41-77a6905796ee,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=098c1284-d575-4d57-8b41-77a6905796ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/cinder-ks-user-bjsxs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=098c1284-d575-4d57-8b41-77a6905796ee;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=098c1284-d575-4d57-8b41-77a6905796ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c9e0ad9ee4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=49976 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=098c1284-d575-4d57-8b41-77a6905796ee,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=098c1284-d575-4d57-8b41-77a6905796ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/cinder-ks-user-bjsxs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9e0ad9ee4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=49976 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/cinder-ks-user-bjsxs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9e0ad9ee4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=159 identity=49976 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/cinder-ks-user-bjsxs subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9e0ad9ee4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=159 identity=49976 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/cinder-ks-user-bjsxs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c9e0ad9ee4 endpointID=159 k8sNamespace=openstack k8sPodName=cinder-ks-user-bjsxs subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=098c1284-d575-4d57-8b41-77a6905796ee k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=098c1284-d575-4d57-8b41-77a6905796ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=c9e0ad9ee4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=159 identity=49976 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/cinder-ks-user-bjsxs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 2d9d53b3-1783-4d6e-9cb7-739f159a7e8a default }" containerID=ca7452d73fea5dabab95f85a78df9b89cd38f9bfd853e72eed7f7d0a3eea8667 datapathConfiguration="&{false false false false false }" interface=lxc3bce768339dd k8sPodName=openstack/cinder-backup-storage-init-9s2b8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca7452d73f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9s2b8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca7452d73f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8cbea84b-1f3e-4930-bfee-a1e53f840d40,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=8cbea84b-1f3e-4930-bfee-a1e53f840d40,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9s2b8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8cbea84b-1f3e-4930-bfee-a1e53f840d40;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=8cbea84b-1f3e-4930-bfee-a1e53f840d40;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca7452d73f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=9627 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8cbea84b-1f3e-4930-bfee-a1e53f840d40,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=8cbea84b-1f3e-4930-bfee-a1e53f840d40,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9s2b8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca7452d73f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=9627 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9s2b8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ca7452d73f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=46 identity=9627 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9s2b8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca7452d73f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=46 identity=9627 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9s2b8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca7452d73f endpointID=46 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-9s2b8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8cbea84b-1f3e-4930-bfee-a1e53f840d40 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=8cbea84b-1f3e-4930-bfee-a1e53f840d40 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=ca7452d73f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=46 identity=9627 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9s2b8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 ef587346-100f-4bb2-8362-024ad51959ee default }" containerID=d21573e0d11ef4e9712a9a30dee309b4af9ba6328367ea46ea074ef71cb2cc46 datapathConfiguration="&{false false false false false }" interface=lxc99f769608d6a k8sPodName=openstack/cinder-create-internal-tenant-9lqxj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d21573e0d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9lqxj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d21573e0d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d543837e-0f1b-4357-815d-6a4f224e4cd6,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=d543837e-0f1b-4357-815d-6a4f224e4cd6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9lqxj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d543837e-0f1b-4357-815d-6a4f224e4cd6;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=d543837e-0f1b-4357-815d-6a4f224e4cd6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d21573e0d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=25615 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d543837e-0f1b-4357-815d-6a4f224e4cd6,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=d543837e-0f1b-4357-815d-6a4f224e4cd6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9lqxj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d21573e0d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=25615 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9lqxj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d21573e0d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=572 identity=25615 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9lqxj subsys=endpoint level=info msg="Successful endpoint creation" containerID=d21573e0d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=572 identity=25615 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9lqxj subsys=daemon level=info msg="Delete endpoint request" containerID=d21573e0d1 endpointID=572 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-9lqxj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d543837e-0f1b-4357-815d-6a4f224e4cd6 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=d543837e-0f1b-4357-815d-6a4f224e4cd6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d21573e0d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=572 identity=25615 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9lqxj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 d71e3ec1-e9c6-449c-9aff-d9d82cd8dbc1 default }" containerID=c86dff6a35f478af9a7ffab26c4fce5b4c3bdd88409213cbc6c58af639630360 datapathConfiguration="&{false false false false false }" interface=lxcb95ae620ec11 k8sPodName=openstack/cinder-storage-init-txgrk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c86dff6a35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-storage-init-txgrk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c86dff6a35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=81cd5516-17c1-42c5-9ce6-131ecb11c1cc,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=81cd5516-17c1-42c5-9ce6-131ecb11c1cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-storage-init-txgrk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c86dff6a35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-storage-init-txgrk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=81cd5516-17c1-42c5-9ce6-131ecb11c1cc;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=81cd5516-17c1-42c5-9ce6-131ecb11c1cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c86dff6a35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identity=9902 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=81cd5516-17c1-42c5-9ce6-131ecb11c1cc,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=81cd5516-17c1-42c5-9ce6-131ecb11c1cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-storage-init-txgrk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c86dff6a35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identity=9902 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-storage-init-txgrk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c86dff6a35 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2999 identity=9902 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-storage-init-txgrk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c86dff6a35 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2999 identity=9902 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-storage-init-txgrk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c86dff6a35 endpointID=2999 k8sNamespace=openstack k8sPodName=cinder-storage-init-txgrk subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=81cd5516-17c1-42c5-9ce6-131ecb11c1cc k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=81cd5516-17c1-42c5-9ce6-131ecb11c1cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=c86dff6a35 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2999 identity=9902 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-storage-init-txgrk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 6abdf7de-67c9-4547-bb51-329030f18efa default }" containerID=6fb59f55c8f2761047d63826e5cf0d2603a83f17d610909042d4c1914843fc1f datapathConfiguration="&{false false false false false }" interface=lxc471e0296da51 k8sPodName=openstack/cinder-bootstrap-zpmwd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fb59f55c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-bootstrap-zpmwd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fb59f55c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e079a554-289c-49a2-81ce-35fcac4a4a0c,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e079a554-289c-49a2-81ce-35fcac4a4a0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-bootstrap-zpmwd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6fb59f55c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-bootstrap-zpmwd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e079a554-289c-49a2-81ce-35fcac4a4a0c;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=e079a554-289c-49a2-81ce-35fcac4a4a0c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fb59f55c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identity=2067 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e079a554-289c-49a2-81ce-35fcac4a4a0c,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e079a554-289c-49a2-81ce-35fcac4a4a0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-bootstrap-zpmwd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fb59f55c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identity=2067 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-bootstrap-zpmwd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6fb59f55c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1270 identity=2067 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-bootstrap-zpmwd subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fb59f55c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1270 identity=2067 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-bootstrap-zpmwd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.43 0195e58d-1a41-43d1-90aa-c655df0c1ea9 default }" containerID=29180b3584af12b3a667dcda7088efc4af20e6062d9943ba1b7d492553cc97b2 datapathConfiguration="&{false false false false false }" interface=lxcfbb7032d8729 k8sPodName=openstack/cinder-volume-77558579b-r5zl4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29180b3584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-volume-77558579b-r5zl4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29180b3584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-volume-77558579b-r5zl4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29180b3584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identity=3053 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-volume-77558579b-r5zl4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29180b3584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identity=3053 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-volume-77558579b-r5zl4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 c5612120-ee5d-4bc3-9618-1d42b6c56c42 default }" containerID=7ee7a4177c39ba3331f74e550e7889e729ea54fa1c5fe2edd04b0269b82dc4e9 datapathConfiguration="&{false false false false false }" interface=lxc366b7f86b6b0 k8sPodName=openstack/cinder-backup-59b486bb85-s5wkr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ee7a4177c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-backup-59b486bb85-s5wkr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ee7a4177c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-backup-59b486bb85-s5wkr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ee7a4177c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identity=20915 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-backup-59b486bb85-s5wkr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ee7a4177c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identity=20915 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-backup-59b486bb85-s5wkr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29180b3584 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=640 identity=3053 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-volume-77558579b-r5zl4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=29180b3584 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=640 identity=3053 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-volume-77558579b-r5zl4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7ee7a4177c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=511 identity=20915 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-backup-59b486bb85-s5wkr subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ee7a4177c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=511 identity=20915 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-backup-59b486bb85-s5wkr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6fb59f55c8 endpointID=1270 k8sNamespace=openstack k8sPodName=cinder-bootstrap-zpmwd subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e079a554-289c-49a2-81ce-35fcac4a4a0c k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=e079a554-289c-49a2-81ce-35fcac4a4a0c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=6fb59f55c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1270 identity=2067 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-bootstrap-zpmwd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 2697d7aa-e117-4404-9264-1ba0da7e1159 default }" containerID=b59fd001c90f5543d6953c0060009e470ef84db980829225b494241b19059116 datapathConfiguration="&{false false false false false }" interface=lxc24b64387efb8 k8sPodName=openstack/placement-api-d65dcfdb4-drc6d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b59fd001c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-api-d65dcfdb4-drc6d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b59fd001c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-api-d65dcfdb4-drc6d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b59fd001c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identity=60420 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-api-d65dcfdb4-drc6d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b59fd001c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identity=60420 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-api-d65dcfdb4-drc6d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.128 6d0a4a3e-03ae-440b-a6ce-a46b6f86b0ee default }" containerID=2e4104a702b92d0b147a16a808f509b49be7d97c412ed25460f839d82240da58 datapathConfiguration="&{false false false false false }" interface=lxc709e3a237c33 k8sPodName=openstack/placement-db-init-9hln4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e4104a702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/placement-db-init-9hln4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e4104a702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=cce72ab4-b7a2-4818-bdc1-c58c4485bc83,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=cce72ab4-b7a2-4818-bdc1-c58c4485bc83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/placement-db-init-9hln4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=cce72ab4-b7a2-4818-bdc1-c58c4485bc83;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=cce72ab4-b7a2-4818-bdc1-c58c4485bc83;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e4104a702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identity=30197 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=cce72ab4-b7a2-4818-bdc1-c58c4485bc83,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=cce72ab4-b7a2-4818-bdc1-c58c4485bc83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/placement-db-init-9hln4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e4104a702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identity=30197 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/placement-db-init-9hln4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b59fd001c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=596 identity=60420 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-api-d65dcfdb4-drc6d subsys=endpoint level=info msg="Successful endpoint creation" containerID=b59fd001c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=596 identity=60420 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-api-d65dcfdb4-drc6d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2e4104a702 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1706 identity=30197 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/placement-db-init-9hln4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e4104a702 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1706 identity=30197 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/placement-db-init-9hln4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2e4104a702 endpointID=1706 k8sNamespace=openstack k8sPodName=placement-db-init-9hln4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=cce72ab4-b7a2-4818-bdc1-c58c4485bc83 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=cce72ab4-b7a2-4818-bdc1-c58c4485bc83 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=2e4104a702 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1706 identity=30197 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/placement-db-init-9hln4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 7d261d99-9e6d-4379-ab0a-f5ac4ed33220 default }" containerID=cf7c7321aa49a50160b84898201f6516b1c13c61666106a3eb5298c4c0f44bdb datapathConfiguration="&{false false false false false }" interface=lxc1fc3167dfe4e k8sPodName=openstack/placement-db-sync-7bq6j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf7c7321aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-db-sync-7bq6j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf7c7321aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=19d35738-1e86-4fb3-b939-f41eb9c74d35,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=19d35738-1e86-4fb3-b939-f41eb9c74d35,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-db-sync-7bq6j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=19d35738-1e86-4fb3-b939-f41eb9c74d35;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=19d35738-1e86-4fb3-b939-f41eb9c74d35;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cf7c7321aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-db-sync-7bq6j line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cf7c7321aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 identity=7480 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=19d35738-1e86-4fb3-b939-f41eb9c74d35,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=19d35738-1e86-4fb3-b939-f41eb9c74d35,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-db-sync-7bq6j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf7c7321aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 identity=7480 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-db-sync-7bq6j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf7c7321aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1236 identity=7480 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-db-sync-7bq6j subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf7c7321aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1236 identity=7480 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-db-sync-7bq6j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cf7c7321aa endpointID=1236 k8sNamespace=openstack k8sPodName=placement-db-sync-7bq6j subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=19d35738-1e86-4fb3-b939-f41eb9c74d35 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=19d35738-1e86-4fb3-b939-f41eb9c74d35 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=cf7c7321aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1236 identity=7480 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/placement-db-sync-7bq6j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 e79637f5-7f4e-46c6-8081-22f3e47939e8 default }" containerID=a916a7f7a44127db33422b9f44cefcaae29733d1d8ac74a5f62b3e747a95b2cf datapathConfiguration="&{false false false false false }" interface=lxcf18e13c7975d k8sPodName=openstack/placement-ks-service-4646p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a916a7f7a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/placement-ks-service-4646p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a916a7f7a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=51e18a6c-8b66-4802-9a48-6d67ce391742,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=51e18a6c-8b66-4802-9a48-6d67ce391742,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/placement-ks-service-4646p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=51e18a6c-8b66-4802-9a48-6d67ce391742;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=51e18a6c-8b66-4802-9a48-6d67ce391742;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a916a7f7a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=9933 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=51e18a6c-8b66-4802-9a48-6d67ce391742,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=51e18a6c-8b66-4802-9a48-6d67ce391742,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/placement-ks-service-4646p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a916a7f7a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=9933 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/placement-ks-service-4646p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a916a7f7a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=333 identity=9933 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/placement-ks-service-4646p subsys=endpoint level=info msg="Successful endpoint creation" containerID=a916a7f7a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=333 identity=9933 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/placement-ks-service-4646p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a916a7f7a4 endpointID=333 k8sNamespace=openstack k8sPodName=placement-ks-service-4646p subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=51e18a6c-8b66-4802-9a48-6d67ce391742 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=51e18a6c-8b66-4802-9a48-6d67ce391742 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=a916a7f7a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=333 identity=9933 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/placement-ks-service-4646p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 7e585cc6-b330-4ba9-9f32-988620fda330 default }" containerID=758b2e37d086e6ebcd31b929f8bb52bd5d59577e284446a5a354c225efde62d2 datapathConfiguration="&{false false false false false }" interface=lxcd1481932524a k8sPodName=openstack/placement-ks-user-jbtx7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=758b2e37d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/placement-ks-user-jbtx7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=758b2e37d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=257d8064-0532-412b-a0f3-3f003ec9f526,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=257d8064-0532-412b-a0f3-3f003ec9f526,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/placement-ks-user-jbtx7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=257d8064-0532-412b-a0f3-3f003ec9f526;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=257d8064-0532-412b-a0f3-3f003ec9f526;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=758b2e37d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=44405 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=257d8064-0532-412b-a0f3-3f003ec9f526,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=257d8064-0532-412b-a0f3-3f003ec9f526,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/placement-ks-user-jbtx7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=758b2e37d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=44405 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/placement-ks-user-jbtx7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=758b2e37d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=480 identity=44405 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/placement-ks-user-jbtx7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=758b2e37d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=480 identity=44405 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/placement-ks-user-jbtx7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=758b2e37d0 endpointID=480 k8sNamespace=openstack k8sPodName=placement-ks-user-jbtx7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=257d8064-0532-412b-a0f3-3f003ec9f526 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=257d8064-0532-412b-a0f3-3f003ec9f526 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=758b2e37d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=480 identity=44405 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/placement-ks-user-jbtx7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 7ae9fde2-2b75-4d90-b143-521d80212249 default }" containerID=7715dcbbabed8232dafa0c6ccc05f8865190e580d3c9f75d7ea573521e437403 datapathConfiguration="&{false false false false false }" interface=lxc44d3e82bb126 k8sPodName=openstack/placement-ks-endpoints-67pcb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7715dcbbab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3940 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-67pcb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7715dcbbab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3940 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=f1548940-1834-4438-b401-2a082ebdb933,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f1548940-1834-4438-b401-2a082ebdb933,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-67pcb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7715dcbbab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3940 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-67pcb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=f1548940-1834-4438-b401-2a082ebdb933;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f1548940-1834-4438-b401-2a082ebdb933;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7715dcbbab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3940 identity=3593 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=f1548940-1834-4438-b401-2a082ebdb933,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f1548940-1834-4438-b401-2a082ebdb933,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-67pcb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7715dcbbab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3940 identity=3593 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-67pcb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7715dcbbab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3940 identity=3593 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-67pcb subsys=endpoint level=info msg="Successful endpoint creation" containerID=7715dcbbab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3940 identity=3593 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-67pcb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7715dcbbab endpointID=3940 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-67pcb subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=f1548940-1834-4438-b401-2a082ebdb933 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f1548940-1834-4438-b401-2a082ebdb933 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=7715dcbbab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3940 identity=3593 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/placement-ks-endpoints-67pcb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 8fdb4ec8-90e0-4e49-b6e1-b2f071a80915 default }" containerID=5ddbbb470b4baa88e1e3e113bce92450440b0dd23a907308e500b0c32f627287 datapathConfiguration="&{false false false false false }" interface=lxc11b97942c46b k8sPodName=openstack/neutron-coredns-7dd4958666-7h697 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ddbbb470b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2764 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-7h697 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ddbbb470b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2764 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-7h697 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ddbbb470b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2764 identity=24830 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-7h697 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ddbbb470b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2764 identity=24830 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-7h697 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5ddbbb470b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2764 identity=24830 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-7h697 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ddbbb470b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2764 identity=24830 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-7h697 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.174 d1b0bd80-e106-438b-b43c-38b594cbb2f1 default }" containerID=27956a9e75ff01b37706f6438738a56b474cc929cffec2bc9d35e442ece984d8 datapathConfiguration="&{false false false false false }" interface=lxc753454dd0034 k8sPodName=local-path-storage/helper-pod-create-pvc-fc8b959d-dbdb-4384-ac7c-20ee812f4964 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27956a9e75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc8b959d-dbdb-4384-ac7c-20ee812f4964 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27956a9e75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc8b959d-dbdb-4384-ac7c-20ee812f4964 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27956a9e75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identity=22721 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc8b959d-dbdb-4384-ac7c-20ee812f4964 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27956a9e75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identity=22721 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc8b959d-dbdb-4384-ac7c-20ee812f4964 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27956a9e75 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=286 identity=22721 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc8b959d-dbdb-4384-ac7c-20ee812f4964 subsys=endpoint level=info msg="Successful endpoint creation" containerID=27956a9e75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=286 identity=22721 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc8b959d-dbdb-4384-ac7c-20ee812f4964 subsys=daemon level=info msg="Delete endpoint request" containerID=27956a9e75 endpointID=286 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fc8b959d-dbdb-4384-ac7c-20ee812f4964 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=27956a9e75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=286 identity=22721 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc8b959d-dbdb-4384-ac7c-20ee812f4964 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 54462f7a-7f02-44e4-abb4-63f9e00c83b1 default }" containerID=a84a36b7d04a41dbaa40ea27334333f6d7291cea5cca5b64a338d43c3447875f datapathConfiguration="&{false false false false false }" interface=lxc04cb9bbc0c43 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a84a36b7d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a84a36b7d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a84a36b7d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=4729 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a84a36b7d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=4729 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a84a36b7d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=487 identity=4729 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a84a36b7d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=487 identity=4729 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.12 437d6929-ac71-46b9-99c2-31a2e32b0416 default }" containerID=a7592bb09027d1d1af372d695a4b39025276aadedaa132ceedbd2b11d8ba662d datapathConfiguration="&{false false false false false }" interface=lxc7e708f36b0e5 k8sPodName=openstack/nova-conductor-6c57c499c7-cx7vj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7592bb090 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/nova-conductor-6c57c499c7-cx7vj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7592bb090 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/nova-conductor-6c57c499c7-cx7vj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a7592bb090 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identity=5052 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/nova-conductor-6c57c499c7-cx7vj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7592bb090 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identity=5052 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/nova-conductor-6c57c499c7-cx7vj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 940acf89-2358-4c20-950b-21280b50dd8d default }" containerID=2b3ac21f724dbc861f9282d353f24eb7c8c7cd9fc19f23ed50bfcfc4c7036739 datapathConfiguration="&{false false false false false }" interface=lxc7330e6b0fdc5 k8sPodName=openstack/nova-scheduler-558cc48bb9-pzcxd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b3ac21f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/nova-scheduler-558cc48bb9-pzcxd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b3ac21f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/nova-scheduler-558cc48bb9-pzcxd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b3ac21f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identity=3829 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/nova-scheduler-558cc48bb9-pzcxd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b3ac21f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identity=3829 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/nova-scheduler-558cc48bb9-pzcxd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 d9ce2275-e27b-457c-b7cc-f7d63551d430 default }" containerID=e91927bdfac941143f823fcc55ae90df55685a7fa34e461507d3ea38b62df5ad datapathConfiguration="&{false false false false false }" interface=lxc36dd96931cb4 k8sPodName=openstack/nova-bootstrap-nmc2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e91927bdfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/nova-bootstrap-nmc2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e91927bdfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a91121fe-879d-4db2-b182-a92d41ecb150,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=a91121fe-879d-4db2-b182-a92d41ecb150,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/nova-bootstrap-nmc2v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=a91121fe-879d-4db2-b182-a92d41ecb150;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=a91121fe-879d-4db2-b182-a92d41ecb150;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e91927bdfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identity=4283 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a91121fe-879d-4db2-b182-a92d41ecb150,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=a91121fe-879d-4db2-b182-a92d41ecb150,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/nova-bootstrap-nmc2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e91927bdfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identity=4283 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/nova-bootstrap-nmc2v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7592bb090 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1876 identity=5052 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/nova-conductor-6c57c499c7-cx7vj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7592bb090 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1876 identity=5052 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/nova-conductor-6c57c499c7-cx7vj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.202 f585d062-c9df-4716-b8d0-d76fab1a617d default }" containerID=8d9f1ffaf4fa4787a82699013cfd264f3e91d5cd5cf4b620d415794b0238e3ea datapathConfiguration="&{false false false false false }" interface=lxc833d49746a39 k8sPodName=openstack/nova-cell-setup-2qnkh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d9f1ffaf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3163 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-cell-setup-2qnkh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d9f1ffaf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3163 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=ddbf8b05-0758-44b3-858f-a662625c8d36,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=ddbf8b05-0758-44b3-858f-a662625c8d36,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-cell-setup-2qnkh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=ddbf8b05-0758-44b3-858f-a662625c8d36;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=ddbf8b05-0758-44b3-858f-a662625c8d36;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d9f1ffaf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3163 identity=29848 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=ddbf8b05-0758-44b3-858f-a662625c8d36,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=ddbf8b05-0758-44b3-858f-a662625c8d36,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-cell-setup-2qnkh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d9f1ffaf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3163 identity=29848 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-cell-setup-2qnkh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b3ac21f72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1515 identity=3829 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/nova-scheduler-558cc48bb9-pzcxd subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b3ac21f72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1515 identity=3829 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/nova-scheduler-558cc48bb9-pzcxd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.44 dea969b0-62ee-4d0e-a66e-69df582dbb40 default }" containerID=009bbc85e60c6f9bda2fae2f921b16d642761d679e1fe0f4d1a285b64ee6801d datapathConfiguration="&{false false false false false }" interface=lxc677b84089253 k8sPodName=openstack/nova-api-metadata-679898c-dgm6g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=009bbc85e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2454 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/nova-api-metadata-679898c-dgm6g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=009bbc85e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2454 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/nova-api-metadata-679898c-dgm6g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.130 163a27f9-502d-45e5-a63e-4e878bb6bb44 default }" containerID=25ea1ddd457a3dad53f10e9eafad0852234fb2c7442538a1e2ab010616057d3a datapathConfiguration="&{false false false false false }" interface=lxc5937e43ca7b1 k8sPodName=openstack/nova-api-osapi-79d5f65df9-w2l42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25ea1ddd45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/nova-api-osapi-79d5f65df9-w2l42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25ea1ddd45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/nova-api-osapi-79d5f65df9-w2l42 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 a604524a-441b-4ae5-9923-47ee6b172334 default }" containerID=445f3d4e9e2d23c268eef72922e3d02d1d787ed5997ab38c39f30d95a3728d4d datapathConfiguration="&{false false false false false }" interface=lxce9e951efd514 k8sPodName=openstack/nova-db-init-xxcrw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=445f3d4e9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-db-init-xxcrw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=445f3d4e9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c3b1f5c9-e561-4857-864b-386946f7836a,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=c3b1f5c9-e561-4857-864b-386946f7836a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-db-init-xxcrw subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=009bbc85e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2454 identity=44536 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/nova-api-metadata-679898c-dgm6g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=009bbc85e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2454 identity=44536 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/nova-api-metadata-679898c-dgm6g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e91927bdfa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=313 identity=4283 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/nova-bootstrap-nmc2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=e91927bdfa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=313 identity=4283 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/nova-bootstrap-nmc2v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8d9f1ffaf4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3163 identity=29848 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-cell-setup-2qnkh subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d9f1ffaf4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3163 identity=29848 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-cell-setup-2qnkh subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25ea1ddd45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=1071 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/nova-api-osapi-79d5f65df9-w2l42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25ea1ddd45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=1071 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/nova-api-osapi-79d5f65df9-w2l42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=009bbc85e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2454 identity=44536 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/nova-api-metadata-679898c-dgm6g subsys=endpoint level=info msg="Successful endpoint creation" containerID=009bbc85e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2454 identity=44536 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/nova-api-metadata-679898c-dgm6g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=445f3d4e9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-db-init-xxcrw line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25ea1ddd45 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1607 identity=1071 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/nova-api-osapi-79d5f65df9-w2l42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=25ea1ddd45 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1607 identity=1071 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/nova-api-osapi-79d5f65df9-w2l42 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=c3b1f5c9-e561-4857-864b-386946f7836a;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=c3b1f5c9-e561-4857-864b-386946f7836a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=445f3d4e9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=7460 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c3b1f5c9-e561-4857-864b-386946f7836a,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=c3b1f5c9-e561-4857-864b-386946f7836a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-db-init-xxcrw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=445f3d4e9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=7460 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-db-init-xxcrw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=445f3d4e9e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1197 identity=7460 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-db-init-xxcrw subsys=endpoint level=info msg="Successful endpoint creation" containerID=445f3d4e9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1197 identity=7460 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-db-init-xxcrw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.209 53a69e9d-3d6a-448e-a6d7-e14aef80e461 default }" containerID=f132937aca98cc5c3c93d7939d2e258cd56cb66346b9cbf8403a6e5ed1e004dd datapathConfiguration="&{false false false false false }" interface=lxc1e0b9e2a5550 k8sPodName=openstack/nova-novncproxy-5cb7db76d4-tsdf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f132937aca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-novncproxy-5cb7db76d4-tsdf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f132937aca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-novncproxy-5cb7db76d4-tsdf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f132937aca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-novncproxy-5cb7db76d4-tsdf4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f132937aca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=55848 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-novncproxy-5cb7db76d4-tsdf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f132937aca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=55848 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-novncproxy-5cb7db76d4-tsdf4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f132937aca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1350 identity=55848 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-novncproxy-5cb7db76d4-tsdf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f132937aca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1350 identity=55848 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-novncproxy-5cb7db76d4-tsdf4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=445f3d4e9e endpointID=1197 k8sNamespace=openstack k8sPodName=nova-db-init-xxcrw subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=c3b1f5c9-e561-4857-864b-386946f7836a k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=c3b1f5c9-e561-4857-864b-386946f7836a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=445f3d4e9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1197 identity=7460 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-db-init-xxcrw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 6ef74f1e-7bcb-4764-8665-cf0057352d6d default }" containerID=4fe3de0b404860734b1ff44ae8ccd31db8f660cbb27cdf1ac60d6c84bea2e7e5 datapathConfiguration="&{false false false false false }" interface=lxc40252c6752f3 k8sPodName=openstack/nova-db-sync-9fn7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fe3de0b40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/nova-db-sync-9fn7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fe3de0b40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a60dff74-4793-44df-b924-ad5d93f21a8f,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=a60dff74-4793-44df-b924-ad5d93f21a8f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/nova-db-sync-9fn7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=a60dff74-4793-44df-b924-ad5d93f21a8f;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=a60dff74-4793-44df-b924-ad5d93f21a8f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fe3de0b40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identity=1104 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a60dff74-4793-44df-b924-ad5d93f21a8f,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=a60dff74-4793-44df-b924-ad5d93f21a8f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/nova-db-sync-9fn7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fe3de0b40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identity=1104 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/nova-db-sync-9fn7b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4fe3de0b40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1319 identity=1104 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/nova-db-sync-9fn7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fe3de0b40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1319 identity=1104 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/nova-db-sync-9fn7b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4fe3de0b40 endpointID=1319 k8sNamespace=openstack k8sPodName=nova-db-sync-9fn7b subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=a60dff74-4793-44df-b924-ad5d93f21a8f k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=a60dff74-4793-44df-b924-ad5d93f21a8f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=4fe3de0b40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1319 identity=1104 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/nova-db-sync-9fn7b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 a5c238aa-4bc4-4622-96d1-10c67b9f2d29 default }" containerID=6f6851f59ffc351cfb67d5f8282821d1681b0c431bc67fd8e30de669b40ed2ba datapathConfiguration="&{false false false false false }" interface=lxc268b5b1f2f92 k8sPodName=openstack/nova-rabbit-init-xwjrg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f6851f59f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/nova-rabbit-init-xwjrg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f6851f59f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=ece64d9c-92f2-4a97-b828-c8e5525275c5,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ece64d9c-92f2-4a97-b828-c8e5525275c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/nova-rabbit-init-xwjrg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=ece64d9c-92f2-4a97-b828-c8e5525275c5;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ece64d9c-92f2-4a97-b828-c8e5525275c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f6851f59f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=1969 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=ece64d9c-92f2-4a97-b828-c8e5525275c5,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ece64d9c-92f2-4a97-b828-c8e5525275c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/nova-rabbit-init-xwjrg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f6851f59f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=1969 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/nova-rabbit-init-xwjrg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6f6851f59f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=35 identity=1969 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/nova-rabbit-init-xwjrg subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f6851f59f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=1969 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/nova-rabbit-init-xwjrg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f6851f59f endpointID=35 k8sNamespace=openstack k8sPodName=nova-rabbit-init-xwjrg subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=ece64d9c-92f2-4a97-b828-c8e5525275c5 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ece64d9c-92f2-4a97-b828-c8e5525275c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=6f6851f59f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=1969 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/nova-rabbit-init-xwjrg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 00b9072f-632b-4248-ba05-715e07870223 default }" containerID=b277fcbb6bec713fe39d14b4263f32e7ef907bcb8aadc10242c0d3fdd8f6453e datapathConfiguration="&{false false false false false }" interface=lxcc026b74bfc6b k8sPodName=openstack/nova-ks-service-md7sx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b277fcbb6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/nova-ks-service-md7sx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b277fcbb6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=dfbad950-ab21-48fe-ab74-01b37a5e4bdd,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=dfbad950-ab21-48fe-ab74-01b37a5e4bdd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/nova-ks-service-md7sx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b277fcbb6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.22 ipv6= k8sPodName=openstack/nova-ks-service-md7sx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=dfbad950-ab21-48fe-ab74-01b37a5e4bdd;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=dfbad950-ab21-48fe-ab74-01b37a5e4bdd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b277fcbb6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 identity=25332 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=dfbad950-ab21-48fe-ab74-01b37a5e4bdd,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=dfbad950-ab21-48fe-ab74-01b37a5e4bdd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/nova-ks-service-md7sx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b277fcbb6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 identity=25332 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/nova-ks-service-md7sx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b277fcbb6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=113 identity=25332 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/nova-ks-service-md7sx subsys=endpoint level=info msg="Successful endpoint creation" containerID=b277fcbb6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=113 identity=25332 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/nova-ks-service-md7sx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b277fcbb6b endpointID=113 k8sNamespace=openstack k8sPodName=nova-ks-service-md7sx subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=dfbad950-ab21-48fe-ab74-01b37a5e4bdd k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=dfbad950-ab21-48fe-ab74-01b37a5e4bdd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=b277fcbb6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=113 identity=25332 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/nova-ks-service-md7sx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 e5b307c9-fab5-4192-b695-995b00005193 default }" containerID=4b73c567df737eb84296285aed52c6246497e325e4ec9deb495b1954248d2bec datapathConfiguration="&{false false false false false }" interface=lxc65b7f65ea1bb k8sPodName=openstack/nova-ks-endpoints-bj8ng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b73c567df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-ks-endpoints-bj8ng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b73c567df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b711bbb3-c5a8-44ed-b8b6-ec8b5fa1ded9,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b711bbb3-c5a8-44ed-b8b6-ec8b5fa1ded9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-ks-endpoints-bj8ng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=b711bbb3-c5a8-44ed-b8b6-ec8b5fa1ded9;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b711bbb3-c5a8-44ed-b8b6-ec8b5fa1ded9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b73c567df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 identity=21604 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b711bbb3-c5a8-44ed-b8b6-ec8b5fa1ded9,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b711bbb3-c5a8-44ed-b8b6-ec8b5fa1ded9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-ks-endpoints-bj8ng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b73c567df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 identity=21604 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-ks-endpoints-bj8ng subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4b73c567df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2754 identity=21604 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-ks-endpoints-bj8ng subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b73c567df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2754 identity=21604 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-ks-endpoints-bj8ng subsys=daemon level=info msg="Delete endpoint request" containerID=4b73c567df endpointID=2754 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-bj8ng subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=b711bbb3-c5a8-44ed-b8b6-ec8b5fa1ded9 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b711bbb3-c5a8-44ed-b8b6-ec8b5fa1ded9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=4b73c567df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2754 identity=21604 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-ks-endpoints-bj8ng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 1ffae721-5090-4c4c-b8ed-3a9d423768ea default }" containerID=0fe05a1d6b497a3606021b9b89f16b0d6a2abdb8be850dd03c1a71fd8956eebb datapathConfiguration="&{false false false false false }" interface=lxce4e00d5cf449 k8sPodName=openstack/nova-ks-user-svnx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fe05a1d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-user-svnx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fe05a1d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=aa78e901-2121-4938-a103-1fdce9fa4637,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=aa78e901-2121-4938-a103-1fdce9fa4637,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-user-svnx8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=aa78e901-2121-4938-a103-1fdce9fa4637;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=aa78e901-2121-4938-a103-1fdce9fa4637;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0fe05a1d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 identity=15736 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=aa78e901-2121-4938-a103-1fdce9fa4637,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=aa78e901-2121-4938-a103-1fdce9fa4637,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-user-svnx8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fe05a1d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 identity=15736 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-user-svnx8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0fe05a1d6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3264 identity=15736 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-user-svnx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fe05a1d6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3264 identity=15736 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-user-svnx8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0fe05a1d6b endpointID=3264 k8sNamespace=openstack k8sPodName=nova-ks-user-svnx8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=aa78e901-2121-4938-a103-1fdce9fa4637 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=aa78e901-2121-4938-a103-1fdce9fa4637 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=0fe05a1d6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3264 identity=15736 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-user-svnx8 subsys=endpoint level=info msg="Delete endpoint request" containerID=e91927bdfa endpointID=313 k8sNamespace=openstack k8sPodName=nova-bootstrap-nmc2v subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=a91121fe-879d-4db2-b182-a92d41ecb150 k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=a91121fe-879d-4db2-b182-a92d41ecb150 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=e91927bdfa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=313 identity=4283 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/nova-bootstrap-nmc2v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 8b4f6c9a-e534-4968-addc-1df5d14079a2 default }" containerID=a1f27ecbef14048e8924fce0c5d806e6cf0c679077d26acba306637325c64958 datapathConfiguration="&{false false false false false }" interface=lxcf715e961b491 k8sPodName=local-path-storage/helper-pod-create-pvc-d0c48ea9-1b0f-47fb-9163-ab7ec4f8ff8b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1f27ecbef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0c48ea9-1b0f-47fb-9163-ab7ec4f8ff8b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1f27ecbef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0c48ea9-1b0f-47fb-9163-ab7ec4f8ff8b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1f27ecbef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=22721 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0c48ea9-1b0f-47fb-9163-ab7ec4f8ff8b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1f27ecbef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=22721 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0c48ea9-1b0f-47fb-9163-ab7ec4f8ff8b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1f27ecbef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=35 identity=22721 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0c48ea9-1b0f-47fb-9163-ab7ec4f8ff8b subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1f27ecbef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=22721 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0c48ea9-1b0f-47fb-9163-ab7ec4f8ff8b subsys=daemon level=info msg="Delete endpoint request" containerID=a1f27ecbef endpointID=35 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d0c48ea9-1b0f-47fb-9163-ab7ec4f8ff8b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a1f27ecbef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=22721 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0c48ea9-1b0f-47fb-9163-ab7ec4f8ff8b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 c44b4a85-be42-4473-b734-25d7d9eb88cd default }" containerID=4721290800118a1a822f5f82330347e67c55ae8a1135c098445a26dab4b53f02 datapathConfiguration="&{false false false false false }" interface=lxc22a3cc1b236b k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4721290800 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3428 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4721290800 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3428 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4721290800 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3428 identity=17928 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4721290800 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3428 identity=17928 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4721290800 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3428 identity=17928 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4721290800 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3428 identity=17928 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.167 d9b27e95-205f-4685-b72c-c839df8eec6d default }" containerID=2c762735aac2fd9ae5f58bd32e5c44f612238dd778fa37644992a98dcf9a19e5 datapathConfiguration="&{false false false false false }" interface=lxc0e77ee2acd1b k8sPodName=openstack/neutron-server-bdfd5698b-9tjn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c762735aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=377 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/neutron-server-bdfd5698b-9tjn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c762735aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=377 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/neutron-server-bdfd5698b-9tjn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c762735aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=377 identity=33277 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/neutron-server-bdfd5698b-9tjn6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c762735aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=377 identity=33277 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/neutron-server-bdfd5698b-9tjn6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 411abb33-a188-423a-abc8-3160c93860da default }" containerID=14c79189e10f32f809dac08bac926f4cb0f3a0f3ca1cde46d0b0e125f70610f5 datapathConfiguration="&{false false false false false }" interface=lxccfa0a2e86f7f k8sPodName=openstack/neutron-rpc-server-5898d74cbb-8cfp8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14c79189e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/neutron-rpc-server-5898d74cbb-8cfp8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14c79189e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/neutron-rpc-server-5898d74cbb-8cfp8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14c79189e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 identity=37134 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/neutron-rpc-server-5898d74cbb-8cfp8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14c79189e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 identity=37134 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/neutron-rpc-server-5898d74cbb-8cfp8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c762735aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=377 identity=33277 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/neutron-server-bdfd5698b-9tjn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c762735aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=377 identity=33277 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/neutron-server-bdfd5698b-9tjn6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.146 ea5aa5c6-b1fa-440a-922a-dad9823348e8 default }" containerID=50e885f409085376f7fd0c5525ff883f729077ddd2be653fa34eeefa06b134d4 datapathConfiguration="&{false false false false false }" interface=lxc9b4d6fa051fa k8sPodName=openstack/neutron-db-init-wfhs9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50e885f409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3080 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/neutron-db-init-wfhs9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50e885f409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3080 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=09606fb2-4f89-4193-801a-ffd99c81eaea,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=09606fb2-4f89-4193-801a-ffd99c81eaea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/neutron-db-init-wfhs9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=09606fb2-4f89-4193-801a-ffd99c81eaea;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=09606fb2-4f89-4193-801a-ffd99c81eaea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50e885f409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3080 identity=11185 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=09606fb2-4f89-4193-801a-ffd99c81eaea,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=09606fb2-4f89-4193-801a-ffd99c81eaea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/neutron-db-init-wfhs9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50e885f409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3080 identity=11185 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/neutron-db-init-wfhs9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14c79189e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1732 identity=37134 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/neutron-rpc-server-5898d74cbb-8cfp8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=14c79189e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1732 identity=37134 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/neutron-rpc-server-5898d74cbb-8cfp8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=50e885f409 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3080 identity=11185 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/neutron-db-init-wfhs9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=50e885f409 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3080 identity=11185 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/neutron-db-init-wfhs9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=50e885f409 endpointID=3080 k8sNamespace=openstack k8sPodName=neutron-db-init-wfhs9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=09606fb2-4f89-4193-801a-ffd99c81eaea k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=09606fb2-4f89-4193-801a-ffd99c81eaea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=50e885f409 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3080 identity=11185 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/neutron-db-init-wfhs9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 048c67d9-5275-4357-837e-905e66253ab1 default }" containerID=966ebcd92a87500489327c9f3f7f8f106565bd2fe106169f8937522ee128ea5b datapathConfiguration="&{false false false false false }" interface=lxcc7a3bdca3717 k8sPodName=openstack/neutron-db-sync-mzws9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=966ebcd92a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/neutron-db-sync-mzws9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=966ebcd92a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=931714b0-cdf7-4cde-8f2a-bcce1e0e3bb8,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=931714b0-cdf7-4cde-8f2a-bcce1e0e3bb8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/neutron-db-sync-mzws9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=966ebcd92a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/neutron-db-sync-mzws9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=931714b0-cdf7-4cde-8f2a-bcce1e0e3bb8;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=931714b0-cdf7-4cde-8f2a-bcce1e0e3bb8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=966ebcd92a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 identity=23314 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=931714b0-cdf7-4cde-8f2a-bcce1e0e3bb8,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=931714b0-cdf7-4cde-8f2a-bcce1e0e3bb8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/neutron-db-sync-mzws9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=966ebcd92a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 identity=23314 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/neutron-db-sync-mzws9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=966ebcd92a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2964 identity=23314 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/neutron-db-sync-mzws9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=966ebcd92a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2964 identity=23314 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/neutron-db-sync-mzws9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 159aa89a-2fe4-4831-9917-c867ca372067 default }" containerID=e57747ec0904a407691a9f3e6b6f662f30e263d9ca6938d53a1af8de26aa7f42 datapathConfiguration="&{false false false false false }" interface=lxcad68bf4d5366 k8sPodName=openstack/cinder-volume-usage-audit-29543225-4wdpz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e57747ec09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29543225-4wdpz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e57747ec09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=01f4893f-c17f-41bf-b9e7-1c67b4add544,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29543225,k8s:component=volume-usage-audit,k8s:controller-uid=01f4893f-c17f-41bf-b9e7-1c67b4add544,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29543225,k8s:release_group=cinder" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29543225-4wdpz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=01f4893f-c17f-41bf-b9e7-1c67b4add544;k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29543225;k8s:component=volume-usage-audit;k8s:controller-uid=01f4893f-c17f-41bf-b9e7-1c67b4add544;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-volume-usage-audit-29543225;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e57747ec09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=10370 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=01f4893f-c17f-41bf-b9e7-1c67b4add544,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29543225,k8s:component=volume-usage-audit,k8s:controller-uid=01f4893f-c17f-41bf-b9e7-1c67b4add544,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29543225,k8s:release_group=cinder" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29543225-4wdpz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e57747ec09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=10370 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29543225-4wdpz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e57747ec09 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=168 identity=10370 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29543225-4wdpz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e57747ec09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=168 identity=10370 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29543225-4wdpz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=966ebcd92a endpointID=2964 k8sNamespace=openstack k8sPodName=neutron-db-sync-mzws9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=931714b0-cdf7-4cde-8f2a-bcce1e0e3bb8 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=931714b0-cdf7-4cde-8f2a-bcce1e0e3bb8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=966ebcd92a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2964 identity=23314 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/neutron-db-sync-mzws9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 b91dad97-e831-48a7-b60b-17288cefec34 default }" containerID=d871c2ac7e23ba3ee399a33d004032a5f300debd9005b0bb8e2d2f0da7ca0b0a datapathConfiguration="&{false false false false false }" interface=lxcd316acc1382b k8sPodName=openstack/neutron-rabbit-init-7rvfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d871c2ac7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-rabbit-init-7rvfq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d871c2ac7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=c1db523f-ad53-4e3c-ac08-d656f96eab32,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c1db523f-ad53-4e3c-ac08-d656f96eab32,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-rabbit-init-7rvfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=c1db523f-ad53-4e3c-ac08-d656f96eab32;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c1db523f-ad53-4e3c-ac08-d656f96eab32;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d871c2ac7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identity=18927 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=c1db523f-ad53-4e3c-ac08-d656f96eab32,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c1db523f-ad53-4e3c-ac08-d656f96eab32,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-rabbit-init-7rvfq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d871c2ac7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identity=18927 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-rabbit-init-7rvfq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d871c2ac7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3905 identity=18927 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-rabbit-init-7rvfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d871c2ac7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3905 identity=18927 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-rabbit-init-7rvfq subsys=daemon level=info msg="Delete endpoint request" containerID=e57747ec09 endpointID=168 k8sNamespace=openstack k8sPodName=cinder-volume-usage-audit-29543225-4wdpz subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=01f4893f-c17f-41bf-b9e7-1c67b4add544 k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29543225 k8s:component=volume-usage-audit k8s:controller-uid=01f4893f-c17f-41bf-b9e7-1c67b4add544 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-volume-usage-audit-29543225 k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e57747ec09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=168 identity=10370 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29543225-4wdpz subsys=endpoint level=info msg="Delete endpoint request" containerID=d871c2ac7e endpointID=3905 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-7rvfq subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=c1db523f-ad53-4e3c-ac08-d656f96eab32 k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c1db523f-ad53-4e3c-ac08-d656f96eab32 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=d871c2ac7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3905 identity=18927 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-rabbit-init-7rvfq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 ec227421-f3d7-43e8-aa5a-03b42859cd5d default }" containerID=ea9533c89092c3bccf1434d2723a9e4c5d5d0ebe526c660b6c3d966b7d180f3f datapathConfiguration="&{false false false false false }" interface=lxcce97fb71f641 k8sPodName=openstack/neutron-ks-service-5xmvb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea9533c890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-service-5xmvb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea9533c890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=7d891d5d-5964-4641-a92f-2be7483f2716,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=7d891d5d-5964-4641-a92f-2be7483f2716,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-service-5xmvb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ea9533c890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-service-5xmvb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=7d891d5d-5964-4641-a92f-2be7483f2716;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=7d891d5d-5964-4641-a92f-2be7483f2716;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea9533c890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 identity=4748 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=7d891d5d-5964-4641-a92f-2be7483f2716,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=7d891d5d-5964-4641-a92f-2be7483f2716,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-service-5xmvb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea9533c890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 identity=4748 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-service-5xmvb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea9533c890 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=659 identity=4748 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-service-5xmvb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea9533c890 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=659 identity=4748 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-service-5xmvb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea9533c890 endpointID=659 k8sNamespace=openstack k8sPodName=neutron-ks-service-5xmvb subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=7d891d5d-5964-4641-a92f-2be7483f2716 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=7d891d5d-5964-4641-a92f-2be7483f2716 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=ea9533c890 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=659 identity=4748 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/neutron-ks-service-5xmvb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 7556664b-2bd4-4895-bb0a-068233db617e default }" containerID=d0c2ed1a689fe579ad306a8470ee69c4d1953ea8c218090494affb03655e356d datapathConfiguration="&{false false false false false }" interface=lxc8cd8d2529b38 k8sPodName=openstack/neutron-ks-endpoints-5qxpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0c2ed1a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/neutron-ks-endpoints-5qxpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0c2ed1a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=a3d5c47f-3af0-407d-b75f-d9843df38ad1,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a3d5c47f-3af0-407d-b75f-d9843df38ad1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/neutron-ks-endpoints-5qxpb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=a3d5c47f-3af0-407d-b75f-d9843df38ad1;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a3d5c47f-3af0-407d-b75f-d9843df38ad1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0c2ed1a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identity=54045 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=a3d5c47f-3af0-407d-b75f-d9843df38ad1,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a3d5c47f-3af0-407d-b75f-d9843df38ad1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/neutron-ks-endpoints-5qxpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0c2ed1a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identity=54045 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/neutron-ks-endpoints-5qxpb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0c2ed1a68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3099 identity=54045 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/neutron-ks-endpoints-5qxpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0c2ed1a68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3099 identity=54045 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/neutron-ks-endpoints-5qxpb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d0c2ed1a68 endpointID=3099 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-5qxpb subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=a3d5c47f-3af0-407d-b75f-d9843df38ad1 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a3d5c47f-3af0-407d-b75f-d9843df38ad1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=d0c2ed1a68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3099 identity=54045 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/neutron-ks-endpoints-5qxpb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 ea365e70-1556-47bf-8c3b-c105329cd32f default }" containerID=9eaedc80fdf81f4e4bb51b2a8d8631d4cf93a0b2bfd1b872fea5adf1c9e468cf datapathConfiguration="&{false false false false false }" interface=lxc8d2d4c31c5b4 k8sPodName=openstack/neutron-ks-user-65m65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9eaedc80fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1907 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/neutron-ks-user-65m65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9eaedc80fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1907 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=077abfc5-0b39-4f77-b82d-d2783e3d0d5e,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=077abfc5-0b39-4f77-b82d-d2783e3d0d5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/neutron-ks-user-65m65 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=077abfc5-0b39-4f77-b82d-d2783e3d0d5e;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=077abfc5-0b39-4f77-b82d-d2783e3d0d5e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9eaedc80fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1907 identity=29407 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=077abfc5-0b39-4f77-b82d-d2783e3d0d5e,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=077abfc5-0b39-4f77-b82d-d2783e3d0d5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/neutron-ks-user-65m65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9eaedc80fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1907 identity=29407 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/neutron-ks-user-65m65 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9eaedc80fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1907 identity=29407 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/neutron-ks-user-65m65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9eaedc80fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1907 identity=29407 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/neutron-ks-user-65m65 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9eaedc80fd endpointID=1907 k8sNamespace=openstack k8sPodName=neutron-ks-user-65m65 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=077abfc5-0b39-4f77-b82d-d2783e3d0d5e k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=077abfc5-0b39-4f77-b82d-d2783e3d0d5e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=9eaedc80fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1907 identity=29407 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/neutron-ks-user-65m65 subsys=endpoint