level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="921.182µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="71.662µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.434423ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="15.311µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=115.500644ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.17µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.89µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="63.751µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="73.432µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="75.492µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="445.76µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.16µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.455808ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.146972ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="49.191µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="48.921µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="253.876µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="93.342µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="90.392µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=57.092731ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="89.872µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.156.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.059318ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="5.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.792882ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="21.71µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.572436ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.29µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="15.981µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="27.65µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="23.671µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="41.411µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="352.728µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.56µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="228.015µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="966.722µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.508685ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.62µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="15.511µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.156 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.156 ipAddr.ipv6="" k8sNodeIP=199.204.45.156 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.156" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.234" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.156" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.156} {CiliumInternalIP 10.0.0.234}] 10.0.0.0/24 [] [] 10.0.0.28 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39223" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.900622623s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="22.01µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="12.35µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="37.521µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="4.97µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.926503779s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.176 49cb3f20-aa26-4315-9a53-2799bed00324 default }" containerID=9059c5022719f273c066737b9c2579f49c13e521a8e1b3b14ef9635c859d54a3 datapathConfiguration="&{false false false false false }" interface=lxcb230fcf6b7a4 k8sPodName=kube-system/coredns-7c96b6546b-g5qk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9059c50227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2203 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g5qk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9059c50227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g5qk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9059c50227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2203 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g5qk2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9059c50227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2203 identity=346 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g5qk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9059c50227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2203 identity=346 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g5qk2 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=341.4159ms file-path=/var/run/cilium/state/templates/6de125315e93115b1331b6c40bb88ccc68767108d5e5e33dc54e6e4ed6442fb9/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1510 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 0c49b09c-dcc5-41f9-9be4-2f41d10e8fd1 default }" containerID=2abcc1441ac06eb7a81d1e09fc08b3ec08f4a9ebcfb6292bcdcdcf062d5ee7c8 datapathConfiguration="&{false false false false false }" interface=lxcf74ada3560f5 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jqd6c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2abcc1441a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4045 ipv4=10.0.0.37 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jqd6c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2abcc1441a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4045 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a48ed85d-c4bc-4532-ace4-acbc9c938be1,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a48ed85d-c4bc-4532-ace4-acbc9c938be1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.37 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jqd6c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=a48ed85d-c4bc-4532-ace4-acbc9c938be1;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=a48ed85d-c4bc-4532-ace4-acbc9c938be1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2abcc1441a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4045 identity=13912 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a48ed85d-c4bc-4532-ace4-acbc9c938be1,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a48ed85d-c4bc-4532-ace4-acbc9c938be1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.37 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jqd6c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2abcc1441a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4045 identity=13912 ipv4=10.0.0.37 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jqd6c subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 ipv4=10.0.0.28 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identityLabels="reserved:health" ipv4=10.0.0.28 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identity=4 identityLabels="reserved:health" ipv4=10.0.0.28 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.084459302s file-path=/var/run/cilium/state/templates/0f9e2c319d925a8d0f37e42ae394d8bf41706999e4ad021be7c00779d24b6c0b/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=552 identity=4 ipv4=10.0.0.28 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9059c50227 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2203 identity=346 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g5qk2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2abcc1441a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4045 identity=13912 ipv4=10.0.0.37 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jqd6c subsys=endpoint level=info msg="Successful endpoint creation" containerID=9059c50227 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2203 identity=346 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g5qk2 subsys=daemon level=info msg="Successful endpoint creation" containerID=2abcc1441a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4045 identity=13912 ipv4=10.0.0.37 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jqd6c subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2abcc1441a endpointID=4045 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-jqd6c subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=a48ed85d-c4bc-4532-ace4-acbc9c938be1 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=a48ed85d-c4bc-4532-ace4-acbc9c938be1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=2abcc1441a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4045 identity=13912 ipv4=10.0.0.37 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jqd6c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 591ca492-3fab-4546-8b84-00a02f473ded default }" containerID=1276e6cf5ff8bdcd1bd8e925d1a7cb90a9969782e2b337c8d032f3a5ca99d8e8 datapathConfiguration="&{false false false false false }" interface=lxcdfc8cf7240eb k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8f57x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1276e6cf5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1832 ipv4=10.0.0.187 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8f57x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1276e6cf5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1832 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.187 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8f57x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1276e6cf5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1832 identity=14871 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.187 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8f57x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1276e6cf5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1832 identity=14871 ipv4=10.0.0.187 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8f57x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1276e6cf5f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1832 identity=14871 ipv4=10.0.0.187 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8f57x subsys=endpoint level=info msg="Successful endpoint creation" containerID=1276e6cf5f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1832 identity=14871 ipv4=10.0.0.187 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8f57x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1510 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01510 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01510 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01510 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01510:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1510 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 d824420c-c02e-4c69-aa79-d00eef520489 default }" containerID=9f99b3828a11debc0918995d226a3cc6ac3dcb39c387661358ae02ee5c1f5095 datapathConfiguration="&{false false false false false }" interface=lxc64fd61570218 k8sPodName=kube-system/coredns-67659f764b-8gvpq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f99b3828a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-8gvpq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f99b3828a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-8gvpq subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9f99b3828a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=346 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-8gvpq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f99b3828a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=346 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-8gvpq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 bacac78e-aab7-43ad-98ca-3006a8713a35 default }" containerID=5cb22910386a718f8309a737cf03f3b7da96f834555f09b6a0bcf65f15528045 datapathConfiguration="&{false false false false false }" interface=lxcb34abeaea7b9 k8sPodName=kube-system/coredns-67659f764b-jh4nm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cb2291038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 ipv4=10.0.0.182 ipv6= k8sPodName=kube-system/coredns-67659f764b-jh4nm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cb2291038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.182 ipv6= k8sPodName=kube-system/coredns-67659f764b-jh4nm subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5cb2291038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 identity=346 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.182 ipv6= k8sPodName=kube-system/coredns-67659f764b-jh4nm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cb2291038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 identity=346 ipv4=10.0.0.182 ipv6= k8sPodName=kube-system/coredns-67659f764b-jh4nm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f99b3828a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=42 identity=346 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-8gvpq subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f99b3828a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=42 identity=346 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-8gvpq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5cb2291038 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2013 identity=346 ipv4=10.0.0.182 ipv6= k8sPodName=kube-system/coredns-67659f764b-jh4nm subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cb2291038 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2013 identity=346 ipv4=10.0.0.182 ipv6= k8sPodName=kube-system/coredns-67659f764b-jh4nm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.129 a1bdf695-ffb0-42bb-9ad3-501e946c3861 default }" containerID=4a6876505310424e8ba14ecd9343e1a4f8d0bbdb27be64be53dd4fc651225472 datapathConfiguration="&{false false false false false }" interface=lxcb103ddff9e8f k8sPodName=local-path-storage/local-path-provisioner-679c578f5-92zts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a68765053 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-92zts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a68765053 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-92zts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=4a68765053 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-92zts line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4a68765053 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identity=24617 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-92zts oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a68765053 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identity=24617 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-92zts subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a68765053 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2365 identity=24617 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-92zts subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a68765053 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2365 identity=24617 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-92zts subsys=daemon level=info msg="Delete endpoint request" containerID=9059c50227 endpointID=2203 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-g5qk2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=9059c50227 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2203 identity=346 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g5qk2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.157 3eaa1627-8a51-42d9-9342-d4f23aadae2f default }" containerID=d0872394e43b3c2453edea49fcecd57a3ef077197d0063313eaa8ddc94ac86c8 datapathConfiguration="&{false false false false false }" interface=lxca394e74519b9 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5r7bj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0872394e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5r7bj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0872394e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5r7bj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.35 1cc6371e-c24d-4632-95aa-0a657cc19c0b default }" containerID=cd4ef2617e12ec404327068690684ff7e37445eaa5372e02ecfff3084f3e63e4 datapathConfiguration="&{false false false false false }" interface=lxc4d8729b74cd0 k8sPodName=cert-manager/cert-manager-75c4c745bc-n7bzd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd4ef2617e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-n7bzd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd4ef2617e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-n7bzd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 94aefe8b-a802-4bb2-b2a2-c649d5bac3a1 default }" containerID=13e8ec46e0129e7c71368f061b16a8845db982a68f4bc6f3149facece0368b5e datapathConfiguration="&{false false false false false }" interface=lxc2873589b7a31 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-nb82r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13e8ec46e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-nb82r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13e8ec46e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-nb82r subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d0872394e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 identity=1752 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5r7bj oldIdentity="no identity" subsys=endpoint level=info msg="Invalid state transition skipped" containerID=cd4ef2617e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-n7bzd line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=13e8ec46e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-nb82r line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=d0872394e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 identity=1752 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5r7bj subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=cd4ef2617e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=55756 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-n7bzd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd4ef2617e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=55756 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-n7bzd subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13e8ec46e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identity=16526 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-nb82r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13e8ec46e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identity=16526 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-nb82r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0872394e4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3748 identity=1752 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5r7bj subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0872394e4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3748 identity=1752 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5r7bj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cd4ef2617e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=191 identity=55756 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-n7bzd subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd4ef2617e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=191 identity=55756 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-n7bzd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=13e8ec46e0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3222 identity=16526 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-nb82r subsys=endpoint level=info msg="Successful endpoint creation" containerID=13e8ec46e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3222 identity=16526 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-nb82r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.237 5d1cf839-3cc1-4c19-9c37-5cbf5d8fa8fe default }" containerID=f7f063f4aeef2f49313a07fb4fc257620bc86b151fc7eafcda34e21b56bf2a19 datapathConfiguration="&{false false false false false }" interface=lxc770acefddefc k8sPodName=cert-manager/cert-manager-startupapicheck-lxnms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7f063f4ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 ipv4=10.0.0.237 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lxnms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7f063f4ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=914eb6bb-e421-4fa9-9d51-f9dbe86277ae,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=914eb6bb-e421-4fa9-9d51-f9dbe86277ae,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.237 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lxnms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=914eb6bb-e421-4fa9-9d51-f9dbe86277ae;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=914eb6bb-e421-4fa9-9d51-f9dbe86277ae;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7f063f4ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identity=20929 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=914eb6bb-e421-4fa9-9d51-f9dbe86277ae,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=914eb6bb-e421-4fa9-9d51-f9dbe86277ae,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.237 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lxnms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7f063f4ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identity=20929 ipv4=10.0.0.237 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lxnms subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7f063f4ae datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=592 identity=20929 ipv4=10.0.0.237 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lxnms subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7f063f4ae datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=592 identity=20929 ipv4=10.0.0.237 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lxnms subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7f063f4ae endpointID=592 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-lxnms subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=914eb6bb-e421-4fa9-9d51-f9dbe86277ae k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=914eb6bb-e421-4fa9-9d51-f9dbe86277ae k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=f7f063f4ae datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=592 identity=20929 ipv4=10.0.0.237 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lxnms subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 9fe82823-7533-4670-bf87-34502e697e37 default }" containerID=f95e3752de7e2da8d07032fa60735073561aa2699ff2c923b97b802e17b0f126 datapathConfiguration="&{false false false false false }" interface=lxc0a11bbd22a24 k8sPodName=ingress-nginx/ingress-nginx-admission-create-4zlvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f95e3752de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 ipv4=10.0.0.39 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4zlvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f95e3752de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2d06f899-d8f3-47e0-8af4-57f0c82ee14a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=2d06f899-d8f3-47e0-8af4-57f0c82ee14a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.39 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4zlvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=2d06f899-d8f3-47e0-8af4-57f0c82ee14a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=2d06f899-d8f3-47e0-8af4-57f0c82ee14a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f95e3752de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identity=8514 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2d06f899-d8f3-47e0-8af4-57f0c82ee14a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=2d06f899-d8f3-47e0-8af4-57f0c82ee14a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.39 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4zlvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f95e3752de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identity=8514 ipv4=10.0.0.39 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4zlvs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f95e3752de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2714 identity=8514 ipv4=10.0.0.39 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4zlvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=f95e3752de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2714 identity=8514 ipv4=10.0.0.39 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4zlvs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f95e3752de endpointID=2714 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-4zlvs subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=2d06f899-d8f3-47e0-8af4-57f0c82ee14a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=2d06f899-d8f3-47e0-8af4-57f0c82ee14a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=f95e3752de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2714 identity=8514 ipv4=10.0.0.39 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4zlvs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 db5981b3-3192-4308-8c5b-ab5bc1f59830 default }" containerID=284cef4b73acebeb2c214fb09cb6b70bb889eac3843ec4691cf39ba675fc46a1 datapathConfiguration="&{false false false false false }" interface=lxc743301c59c94 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tfrfd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=284cef4b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3795 ipv4=10.0.0.14 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tfrfd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=284cef4b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3795 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.14 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tfrfd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=284cef4b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3795 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.14 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tfrfd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=284cef4b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3795 identity=48119 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.14 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tfrfd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=284cef4b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3795 identity=48119 ipv4=10.0.0.14 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tfrfd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=284cef4b73 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3795 identity=48119 ipv4=10.0.0.14 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tfrfd subsys=endpoint level=info msg="Successful endpoint creation" containerID=284cef4b73 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3795 identity=48119 ipv4=10.0.0.14 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tfrfd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.18 4c9dce05-f323-48f8-aa9a-ac8fd19d831c default }" containerID=4261e9c307142eb2af46f164be1cdde620053fa1e252fdf4bc884051a019451e datapathConfiguration="&{false false false false false }" interface=lxc37aafb5cb1c6 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6m2g9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4261e9c307 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6m2g9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4261e9c307 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a0efcc92-d47c-4135-90e6-dc3b6bbd72d9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a0efcc92-d47c-4135-90e6-dc3b6bbd72d9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6m2g9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=a0efcc92-d47c-4135-90e6-dc3b6bbd72d9;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=a0efcc92-d47c-4135-90e6-dc3b6bbd72d9;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4261e9c307 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=59036 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a0efcc92-d47c-4135-90e6-dc3b6bbd72d9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a0efcc92-d47c-4135-90e6-dc3b6bbd72d9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6m2g9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4261e9c307 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=59036 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6m2g9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4261e9c307 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2722 identity=59036 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6m2g9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4261e9c307 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2722 identity=59036 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6m2g9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4261e9c307 endpointID=2722 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-6m2g9 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=a0efcc92-d47c-4135-90e6-dc3b6bbd72d9 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=a0efcc92-d47c-4135-90e6-dc3b6bbd72d9 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=4261e9c307 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2722 identity=59036 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6m2g9 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=05aa6305-4663-4703-97e7-f777e6dd4dd6] Description:}]" policyAddRequest=1c869151-fc8c-45fc-ac2b-68cfd9227b15 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=1c869151-fc8c-45fc-ac2b-68cfd9227b15 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=d040464f-4e71-4f69-aeaa-e85e4e5118b6] Description:}]" policyAddRequest=bd4b4176-864d-4072-9611-6760eaf9140e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=bd4b4176-864d-4072-9611-6760eaf9140e policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.79 d76c781d-4cb9-406d-b80f-e9814499dbf7 default }" containerID=7153f53dab3da8a27af5357f5d2445f3c81be045c37c35d7121c65169d64b268 datapathConfiguration="&{false false false false false }" interface=lxc7d9b321c1675 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cpqvz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7153f53dab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=982 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cpqvz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7153f53dab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=982 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cpqvz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7153f53dab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=982 identity=3907 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cpqvz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7153f53dab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=982 identity=3907 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cpqvz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7153f53dab datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=982 identity=3907 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cpqvz subsys=endpoint level=info msg="Successful endpoint creation" containerID=7153f53dab datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=982 identity=3907 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cpqvz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.194 e44899fc-7cfe-43f3-a731-0c720ee915c5 default }" containerID=af19c81fe820907451630a01cc08c53e66be2b9c8d6385717d128a2455014f2a datapathConfiguration="&{false false false false false }" interface=lxc976ec32688fc k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jxbt4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af19c81fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jxbt4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af19c81fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jxbt4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af19c81fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identity=6976 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jxbt4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=af19c81fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identity=6976 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jxbt4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af19c81fe8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=280 identity=6976 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jxbt4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af19c81fe8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=280 identity=6976 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jxbt4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.224 a7c989d8-2b75-4aa8-9e4e-68933621650d default }" containerID=f4e5a68cc9e14cd60b39d55902f134a5bdefea55c14ed554e4b252f37fed3fd6 datapathConfiguration="&{false false false false false }" interface=lxc95d863e039ec k8sPodName=openstack/pxc-operator-69cb5bbdb9-h7b66 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4e5a68cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h7b66 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4e5a68cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h7b66 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4e5a68cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 identity=30026 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h7b66 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4e5a68cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 identity=30026 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h7b66 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4e5a68cc9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=467 identity=30026 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h7b66 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4e5a68cc9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=467 identity=30026 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h7b66 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 34f3a2d3-4702-4219-b371-e5f61a991e31 default }" containerID=f16918c8908d01bd9dc69cc37aacfe4f23a080bc34f1e1ecb23da53e47505333 datapathConfiguration="&{false false false false false }" interface=lxcf520f25a81c2 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f16918c890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f16918c890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f16918c890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identity=3407 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f16918c890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identity=3407 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f16918c890 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=765 identity=3407 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f16918c890 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=765 identity=3407 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.81 b7aea370-c3d5-4a81-8098-b6759748cf86 default }" containerID=800f961b9838af4eb54888608ac6da21169fcb3b3e3c59283296f7f1db37eb46 datapathConfiguration="&{false false false false false }" interface=lxcf1348209eec9 k8sPodName=local-path-storage/helper-pod-create-pvc-47bd82e3-c33e-4dac-a26b-7910f9e422f5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=800f961b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-47bd82e3-c33e-4dac-a26b-7910f9e422f5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=800f961b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-47bd82e3-c33e-4dac-a26b-7910f9e422f5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=800f961b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identity=20878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-47bd82e3-c33e-4dac-a26b-7910f9e422f5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=800f961b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identity=20878 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-47bd82e3-c33e-4dac-a26b-7910f9e422f5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=800f961b98 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1306 identity=20878 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-47bd82e3-c33e-4dac-a26b-7910f9e422f5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=800f961b98 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1306 identity=20878 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-47bd82e3-c33e-4dac-a26b-7910f9e422f5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=800f961b98 endpointID=1306 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-47bd82e3-c33e-4dac-a26b-7910f9e422f5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=800f961b98 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1306 identity=20878 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-47bd82e3-c33e-4dac-a26b-7910f9e422f5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 005f6b40-3adc-4dfc-a567-90007adbe968 default }" containerID=871e9f7fe0c93170eab9ebd3417fe633ce861a36da0675c03a9c55da2125e5f6 datapathConfiguration="&{false false false false false }" interface=lxc6466019f0765 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=871e9f7fe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=871e9f7fe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=871e9f7fe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=37855 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=871e9f7fe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=37855 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=871e9f7fe0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=537 identity=37855 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=871e9f7fe0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=537 identity=37855 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=warning msg="Network status error received, restarting client connections" error="an error on the server (\"[+]ping ok\\n[+]log ok\\n[-]etcd failed: reason withheld\\n[+]poststarthook/start-kube-apiserver-admission-initializer ok\\n[+]poststarthook/generic-apiserver-start-informers ok\\n[+]poststarthook/priority-and-fairness-config-consumer ok\\n[+]poststarthook/priority-and-fairness-filter ok\\n[+]poststarthook/storage-object-count-tracker-hook ok\\n[+]poststarthook/start-apiextensions-informers ok\\n[+]poststarthook/start-apiextensions-controllers ok\\n[+]poststarthook/crd-informer-synced ok\\n[+]poststarthook/start-service-ip-repair-controllers ok\\n[+]poststarthook/rbac/bootstrap-roles ok\\n[+]poststarthook/scheduling/bootstrap-system-priority-classes ok\\n[+]poststarthook/priority-and-fairness-config-producer ok\\n[+]poststarthook/start-system-namespaces-controller ok\\n[+]poststarthook/bootstrap-controller ok\\n[+]poststarthook/start-cluster-authentication-info-controller ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-controller ok\\n[+]poststarthook/start-deprecated-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-legacy-token-tracking-controller ok\\n[+]poststarthook/aggregator-reload-proxy-client-cert ok\\n[+]poststarthook/start-kube-aggregator-informers ok\\n[+]poststarthook/apiservice-registration-controller ok\\n[+]poststarthook/apiservice-status-available-controller ok\\n[+]poststarthook/kube-apiserver-autoregistration ok\\n[+]autoregister-completion ok\\n[+]poststarthook/apiservice-openapi-controller ok\\n[+]poststarthook/apiservice-openapiv3-controller ok\\n[+]poststarthook/apiservice-discovery-controller ok\\nhealthz check failed\") has prevented the request from succeeding (get healthz.meta.k8s.io)" subsys=k8s-client level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=566e0297-3802-43b7-9d67-1f97baa20bc1] Description:}]" policyAddRequest=c1e1e18d-e033-4fa5-9be3-28fc2643f2bf subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=c1e1e18d-e033-4fa5-9be3-28fc2643f2bf policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.24 b5907df6-f459-400c-b00a-f4a5a946b324 default }" containerID=01b59a8aff65f0c83354f98f8091194ff8877ede1aa8302c3c49bcc7ecb610ed datapathConfiguration="&{false false false false false }" interface=lxcd2efc370bff3 k8sPodName=local-path-storage/helper-pod-create-pvc-916d7e52-09de-47d1-b98f-238d52b7d04f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01b59a8aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-916d7e52-09de-47d1-b98f-238d52b7d04f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01b59a8aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-916d7e52-09de-47d1-b98f-238d52b7d04f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01b59a8aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=20878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-916d7e52-09de-47d1-b98f-238d52b7d04f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01b59a8aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=20878 ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-916d7e52-09de-47d1-b98f-238d52b7d04f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01b59a8aff datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1097 identity=20878 ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-916d7e52-09de-47d1-b98f-238d52b7d04f subsys=endpoint level=info msg="Successful endpoint creation" containerID=01b59a8aff datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1097 identity=20878 ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-916d7e52-09de-47d1-b98f-238d52b7d04f subsys=daemon level=info msg="Delete endpoint request" containerID=01b59a8aff endpointID=1097 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-916d7e52-09de-47d1-b98f-238d52b7d04f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=01b59a8aff datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1097 identity=20878 ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-916d7e52-09de-47d1-b98f-238d52b7d04f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 03d8050e-66d9-43b1-a9e1-9b26bf9908ee default }" containerID=73c4cb792e05db4bde315bd0c6e7d198bde86550bb608f9426baa4af353911d6 datapathConfiguration="&{false false false false false }" interface=lxc24824de67333 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73c4cb792e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73c4cb792e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=73c4cb792e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73c4cb792e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identity=41963 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73c4cb792e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identity=41963 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73c4cb792e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1495 identity=41963 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=73c4cb792e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1495 identity=41963 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=727c25fe-6198-4650-9979-f34ce644678b] Description:}]" policyAddRequest=8c1fa998-1f24-4667-b88d-392752040412 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=8c1fa998-1f24-4667-b88d-392752040412 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.126 e172bfa0-5807-471a-b9e9-1496ddb9d52d default }" containerID=de4439d873e0d80ec505d3737654b334f84f12aed5fce5f1b70cd791bcd052c4 datapathConfiguration="&{false false false false false }" interface=lxc6454ff6eb303 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de4439d873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 ipv4=10.0.0.126 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de4439d873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.126 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de4439d873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identity=2920 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.126 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de4439d873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identity=2920 ipv4=10.0.0.126 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=de4439d873 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=807 identity=2920 ipv4=10.0.0.126 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de4439d873 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=807 identity=2920 ipv4=10.0.0.126 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.003581235543170966 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.193 bd20fd0e-126b-4a1f-96da-4aa5af05c8b0 default }" containerID=f72e9dddcdade170d569db828a1455e43eae41ed036f9594a5f73e663ec7600d datapathConfiguration="&{false false false false false }" interface=lxc06ad5df751b6 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v2dw8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f72e9dddcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3435 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v2dw8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f72e9dddcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3435 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v2dw8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f72e9dddcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3435 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v2dw8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f72e9dddcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3435 identity=40599 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v2dw8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f72e9dddcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3435 identity=40599 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v2dw8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f72e9dddcd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3435 identity=40599 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v2dw8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f72e9dddcd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3435 identity=40599 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v2dw8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.9 a93cb3c7-0338-48ad-ae44-47e4a189a97f default }" containerID=b7e8074fec27302063080c699d937faf2d7dcd7f98e239c39955702ef965d95c datapathConfiguration="&{false false false false false }" interface=lxcfbaa16f09fb5 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-m8xk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7e8074fec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-m8xk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7e8074fec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-m8xk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.249 407f711d-a6c0-4570-84bc-763358b86cc1 default }" containerID=85393467e02b544e4631b2e784a8fac829011efe77f61583dcae6c191e402e46 datapathConfiguration="&{false false false false false }" interface=lxc61967e94bc4e k8sPodName=monitoring/node-feature-discovery-worker-kdrvn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85393467e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kdrvn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85393467e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kdrvn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7e8074fec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identity=6760 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-m8xk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7e8074fec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identity=6760 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-m8xk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85393467e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identity=9434 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kdrvn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85393467e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identity=9434 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kdrvn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7e8074fec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1646 identity=6760 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-m8xk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7e8074fec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1646 identity=6760 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-m8xk2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=85393467e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=322 identity=9434 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kdrvn subsys=endpoint level=info msg="Successful endpoint creation" containerID=85393467e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=322 identity=9434 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kdrvn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 28e791c4-b03a-4190-9869-d61dcf588498 default }" containerID=8a8e4bffd6098deb2dafc67b9eefc7da6ae653f61cf43f47b0ced6bb6f303ddd datapathConfiguration="&{false false false false false }" interface=lxcd43d35ecdf0b k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2hrfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a8e4bffd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2hrfq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a8e4bffd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2hrfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a8e4bffd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identity=32950 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2hrfq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a8e4bffd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identity=32950 ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2hrfq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a8e4bffd6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=734 identity=32950 ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2hrfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a8e4bffd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=734 identity=32950 ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2hrfq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1510 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-181-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01510 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01510 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01510 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01510:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1510 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 73ae2b64-7e73-4808-b757-1f0f7f8e691c default }" containerID=612014d9d0615c723694403c7f9e639592a37c8b999a71be4f61b8d5ca7e20ca datapathConfiguration="&{false false false false false }" interface=lxc182bef9da68e k8sPodName=monitoring/kube-prometheus-stack-admission-create-7kcjg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=612014d9d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7kcjg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=612014d9d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=98d3bc51-6d02-41a1-acc1-19fb144a8976,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=98d3bc51-6d02-41a1-acc1-19fb144a8976,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7kcjg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=98d3bc51-6d02-41a1-acc1-19fb144a8976;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=98d3bc51-6d02-41a1-acc1-19fb144a8976;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=612014d9d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identity=18921 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=98d3bc51-6d02-41a1-acc1-19fb144a8976,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=98d3bc51-6d02-41a1-acc1-19fb144a8976,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7kcjg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=612014d9d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identity=18921 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7kcjg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=612014d9d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=383 identity=18921 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7kcjg subsys=endpoint level=info msg="Successful endpoint creation" containerID=612014d9d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=383 identity=18921 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7kcjg subsys=daemon level=info msg="Delete endpoint request" containerID=612014d9d0 endpointID=383 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-7kcjg subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=98d3bc51-6d02-41a1-acc1-19fb144a8976 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=98d3bc51-6d02-41a1-acc1-19fb144a8976 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=612014d9d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=383 identity=18921 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7kcjg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 b7e4a51e-d0ee-4272-ab29-4eb732bfd496 default }" containerID=17c60eda716825c3cbb817782e26e6b134e6b56d01febe063d8eee3ec95dc9e7 datapathConfiguration="&{false false false false false }" interface=lxcefdb1a369bc7 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tnktp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17c60eda71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tnktp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17c60eda71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tnktp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=17c60eda71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tnktp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17c60eda71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identity=23214 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tnktp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17c60eda71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identity=23214 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tnktp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 98eb9285-5d68-44a4-9f1d-8ac6feabca31 default }" containerID=68914f1b5c4869ffbf2ccf19b1aa93aedbc2a68e362698735e7d24b886cf6f41 datapathConfiguration="&{false false false false false }" interface=lxcdca79d009aa9 k8sPodName=monitoring/kube-prometheus-stack-grafana-55bf8cf7b9-tqpcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68914f1b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-55bf8cf7b9-tqpcs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 aacec9fb-fc27-4718-817e-65028e50722b default }" containerID=6a028c2e8a9898c603d288703c1935e1105652bd429a80d228349e308d85bd87 datapathConfiguration="&{false false false false false }" interface=lxc279068097804 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n7gtc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a028c2e8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n7gtc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68914f1b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-55bf8cf7b9-tqpcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=6a028c2e8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n7gtc subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68914f1b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identity=46634 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-55bf8cf7b9-tqpcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68914f1b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identity=46634 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-55bf8cf7b9-tqpcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a028c2e8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 identity=21028 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n7gtc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a028c2e8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 identity=21028 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n7gtc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17c60eda71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2159 identity=23214 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tnktp subsys=endpoint level=info msg="Successful endpoint creation" containerID=17c60eda71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2159 identity=23214 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tnktp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=68914f1b5c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2181 identity=46634 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-55bf8cf7b9-tqpcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=68914f1b5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2181 identity=46634 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-55bf8cf7b9-tqpcs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6a028c2e8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1351 identity=21028 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n7gtc subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a028c2e8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1351 identity=21028 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n7gtc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.111 e6ec4a30-0eb7-4668-a4e0-ad85a386b3cb default }" containerID=a45fe83e777eb39fcdf16a34c463b06b1832f56a2c12c92f78393c2d89463447 datapathConfiguration="&{false false false false false }" interface=lxcd7fa898252c3 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-btlk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a45fe83e77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-btlk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a45fe83e77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=2bd6a705-f2fc-4c7b-a4c7-5b7518b2ba22,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=2bd6a705-f2fc-4c7b-a4c7-5b7518b2ba22,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-btlk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=2bd6a705-f2fc-4c7b-a4c7-5b7518b2ba22;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=2bd6a705-f2fc-4c7b-a4c7-5b7518b2ba22;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a45fe83e77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identity=8910 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=2bd6a705-f2fc-4c7b-a4c7-5b7518b2ba22,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=2bd6a705-f2fc-4c7b-a4c7-5b7518b2ba22,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-btlk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a45fe83e77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identity=8910 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-btlk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a45fe83e77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=61 identity=8910 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-btlk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a45fe83e77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=61 identity=8910 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-btlk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.62 bcc71d03-763b-4ef6-ad58-dd607d14448a default }" containerID=eebf08e09701fa906e848fd10ca634a5f1f8da6bdd48b8536c12d25efde3325a datapathConfiguration="&{false false false false false }" interface=lxca164ed53c998 k8sPodName=local-path-storage/helper-pod-create-pvc-fc420c67-7acd-4a5c-991b-2e5fe4c7f189 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eebf08e097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc420c67-7acd-4a5c-991b-2e5fe4c7f189 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eebf08e097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc420c67-7acd-4a5c-991b-2e5fe4c7f189 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eebf08e097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identity=20878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc420c67-7acd-4a5c-991b-2e5fe4c7f189 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eebf08e097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identity=20878 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc420c67-7acd-4a5c-991b-2e5fe4c7f189 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 5bb01054-346c-4506-8754-789061194df7 default }" containerID=7c4c93e46777cf3af33377cfd543eccdf30195aedcca32b453b28741eb8ac001 datapathConfiguration="&{false false false false false }" interface=lxc0e0d45cc8587 k8sPodName=local-path-storage/helper-pod-create-pvc-c5eee6f1-21cd-49c4-a7fa-ce4e20ad3146 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c4c93e467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 ipv4=10.0.0.226 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c5eee6f1-21cd-49c4-a7fa-ce4e20ad3146 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c4c93e467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.226 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c5eee6f1-21cd-49c4-a7fa-ce4e20ad3146 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7c4c93e467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identity=20878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.226 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c5eee6f1-21cd-49c4-a7fa-ce4e20ad3146 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c4c93e467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identity=20878 ipv4=10.0.0.226 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c5eee6f1-21cd-49c4-a7fa-ce4e20ad3146 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eebf08e097 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1154 identity=20878 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc420c67-7acd-4a5c-991b-2e5fe4c7f189 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eebf08e097 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1154 identity=20878 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc420c67-7acd-4a5c-991b-2e5fe4c7f189 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7c4c93e467 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2226 identity=20878 ipv4=10.0.0.226 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c5eee6f1-21cd-49c4-a7fa-ce4e20ad3146 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c4c93e467 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2226 identity=20878 ipv4=10.0.0.226 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c5eee6f1-21cd-49c4-a7fa-ce4e20ad3146 subsys=daemon level=info msg="Delete endpoint request" containerID=a45fe83e77 endpointID=61 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-btlk6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=2bd6a705-f2fc-4c7b-a4c7-5b7518b2ba22 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=2bd6a705-f2fc-4c7b-a4c7-5b7518b2ba22 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=a45fe83e77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=61 identity=8910 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-btlk6 subsys=endpoint level=info msg="Delete endpoint request" containerID=eebf08e097 endpointID=1154 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fc420c67-7acd-4a5c-991b-2e5fe4c7f189 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=7c4c93e467 endpointID=2226 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c5eee6f1-21cd-49c4-a7fa-ce4e20ad3146 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7c4c93e467 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2226 identity=20878 ipv4=10.0.0.226 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c5eee6f1-21cd-49c4-a7fa-ce4e20ad3146 subsys=endpoint level=info msg="Removed endpoint" containerID=eebf08e097 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1154 identity=20878 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc420c67-7acd-4a5c-991b-2e5fe4c7f189 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 e42d75fd-1486-4338-a3e4-cba37ff98d51 default }" containerID=abed68284ae8a1b011a918b57b6b54c0bee0297dda0df1d913fa628d67ed7b69 datapathConfiguration="&{false false false false false }" interface=lxcfac2f833cdbd k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abed68284a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abed68284a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=abed68284a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abed68284a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=22487 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abed68284a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=22487 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abed68284a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=85 identity=22487 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abed68284a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=85 identity=22487 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.102 bb42040d-cb5d-44b3-a84a-830f2bf6284e default }" containerID=9e5792bf82746710e61843ffd40a856abf481104b99ad80ece78086751b115f4 datapathConfiguration="&{false false false false false }" interface=lxc781d6d285f9d k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e5792bf82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e5792bf82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9e5792bf82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identity=60324 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e5792bf82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identity=60324 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e5792bf82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=179 identity=60324 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e5792bf82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=179 identity=60324 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 cb5855a1-e180-4312-9cce-09e958a4521e default }" containerID=76717ea6870af09951fbf288cd5a0838602a61792350a646909efad868cbfb81 datapathConfiguration="&{false false false false false }" interface=lxc613271fc6f12 k8sPodName=monitoring/loki-gateway-cf54cb88c-7xr8b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76717ea687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7xr8b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76717ea687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7xr8b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76717ea687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=38368 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7xr8b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76717ea687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=38368 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7xr8b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 90de09fe-2071-4634-b7ea-129064afad6a default }" containerID=3e6372882e7311b45fb9425959462379d3eeca6f0d01cd3c4b66319296817692 datapathConfiguration="&{false false false false false }" interface=lxca16d91a8ec25 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e6372882e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1947 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e6372882e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1947 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e6372882e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1947 identity=728 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e6372882e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1947 identity=728 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 1cc2e5ac-4da7-4b15-b626-e27cd55d5b39 default }" containerID=6f50fa1ba38fead2d17ca528495f8d54e4f345170bc30001cfe5deb160b907df datapathConfiguration="&{false false false false false }" interface=lxcbcbb876a6ace k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f50fa1ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f50fa1ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f50fa1ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identity=9506 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f50fa1ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identity=9506 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76717ea687 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=235 identity=38368 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7xr8b subsys=endpoint level=info msg="Successful endpoint creation" containerID=76717ea687 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=235 identity=38368 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7xr8b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3e6372882e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1947 identity=728 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e6372882e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1947 identity=728 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6f50fa1ba3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=668 identity=9506 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f50fa1ba3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=668 identity=9506 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.73 5d6a6058-dcec-461a-964e-06b6294c0984 default }" containerID=25b93ab58a656698b1ed6c7b6d57bb88d84f7432dd552ec9c619adf9202939c0 datapathConfiguration="&{false false false false false }" interface=lxce8eb0599725e k8sPodName=local-path-storage/helper-pod-create-pvc-04bf8565-3526-4ecf-aeef-10dce0ee472b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25b93ab58a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04bf8565-3526-4ecf-aeef-10dce0ee472b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25b93ab58a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04bf8565-3526-4ecf-aeef-10dce0ee472b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25b93ab58a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identity=20878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04bf8565-3526-4ecf-aeef-10dce0ee472b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25b93ab58a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identity=20878 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04bf8565-3526-4ecf-aeef-10dce0ee472b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25b93ab58a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1377 identity=20878 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04bf8565-3526-4ecf-aeef-10dce0ee472b subsys=endpoint level=info msg="Successful endpoint creation" containerID=25b93ab58a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1377 identity=20878 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04bf8565-3526-4ecf-aeef-10dce0ee472b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.112 336532dc-d982-47c4-8e47-f094d11e61fe default }" containerID=a32952cb3992a638169cdeb024e299ff06bee4d8bcfadecdf54ea490cca1549f datapathConfiguration="&{false false false false false }" interface=lxc5261bea53e5e k8sPodName=monitoring/vector-9f2m6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a32952cb39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/vector-9f2m6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a32952cb39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/vector-9f2m6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a32952cb39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=25850 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/vector-9f2m6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a32952cb39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=25850 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/vector-9f2m6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a32952cb39 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=22 identity=25850 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/vector-9f2m6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a32952cb39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=22 identity=25850 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/vector-9f2m6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=25b93ab58a endpointID=1377 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-04bf8565-3526-4ecf-aeef-10dce0ee472b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=25b93ab58a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1377 identity=20878 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04bf8565-3526-4ecf-aeef-10dce0ee472b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 116d23df-a222-409a-8737-3337319e2528 default }" containerID=92919829b2cbdc42474b79634bb80e139a84ea6cf581f96ae3f93961cc27339f datapathConfiguration="&{false false false false false }" interface=lxca1804f369378 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92919829b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3506 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92919829b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3506 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=92919829b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3506 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92919829b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3506 identity=56078 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92919829b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3506 identity=56078 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92919829b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3506 identity=56078 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=92919829b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3506 identity=56078 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 40aea58a-bf9f-4f65-a305-578d8c9cd37b default }" containerID=37cb4fd77b7fd02e9c60856bd69f542adc99b97b35ce1f2fbefb3d7752bbd104 datapathConfiguration="&{false false false false false }" interface=lxcc22cd30d7fc7 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bcv5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37cb4fd77b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bcv5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37cb4fd77b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bcv5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37cb4fd77b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 identity=43970 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bcv5z oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=37cb4fd77b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 identity=43970 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bcv5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37cb4fd77b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2806 identity=43970 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bcv5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=37cb4fd77b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2806 identity=43970 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bcv5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.242 efcc2d2a-7915-4fe4-a581-de674c8fbfc7 default }" containerID=789a5318aa4dfdfaa2c1fc35f7970335f4b46c23bae41c296b26dfa047d105e2 datapathConfiguration="&{false false false false false }" interface=lxcb87ac160c52c k8sPodName=openstack/memcached-memcached-6479589586-c9prf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=789a5318aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c9prf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=789a5318aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c9prf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=789a5318aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c9prf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=789a5318aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=39275 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c9prf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=789a5318aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=39275 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c9prf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=789a5318aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1431 identity=39275 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c9prf subsys=endpoint level=info msg="Successful endpoint creation" containerID=789a5318aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1431 identity=39275 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c9prf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.101 c7e5c956-be37-459a-8a98-621482c88713 default }" containerID=9a482c11c18aabd4c623520417ca6eccf8a70b654c1a80ea32c05412e689bf18 datapathConfiguration="&{false false false false false }" interface=lxc0eb4d5c38fd7 k8sPodName=local-path-storage/helper-pod-create-pvc-5b20c89d-9d5b-4ee0-bfb1-bafc9128140d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a482c11c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b20c89d-9d5b-4ee0-bfb1-bafc9128140d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a482c11c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b20c89d-9d5b-4ee0-bfb1-bafc9128140d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a482c11c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identity=20878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b20c89d-9d5b-4ee0-bfb1-bafc9128140d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a482c11c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identity=20878 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b20c89d-9d5b-4ee0-bfb1-bafc9128140d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a482c11c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2095 identity=20878 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b20c89d-9d5b-4ee0-bfb1-bafc9128140d subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a482c11c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2095 identity=20878 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b20c89d-9d5b-4ee0-bfb1-bafc9128140d subsys=daemon level=info msg="Delete endpoint request" containerID=9a482c11c1 endpointID=2095 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5b20c89d-9d5b-4ee0-bfb1-bafc9128140d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9a482c11c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2095 identity=20878 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b20c89d-9d5b-4ee0-bfb1-bafc9128140d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 bb3d0b4a-2727-49f6-97a6-ebe1d6e8273f default }" containerID=483be46d4f0a9cb457a5fe10a09c113c07eea2536554937e0181fb41cb2b3dd7 datapathConfiguration="&{false false false false false }" interface=lxc7bd3d9ea9b4d k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=483be46d4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=483be46d4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=483be46d4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=483be46d4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identity=31266 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=483be46d4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identity=31266 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=483be46d4f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=820 identity=31266 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=483be46d4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=820 identity=31266 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.135 f0f74359-33a9-4683-a4f4-a7c922b7b112 default }" containerID=8ef12772808c07bd49a7d6820d538952e4a87fdb4cb4e4ab3f117dc9a1945deb datapathConfiguration="&{false false false false false }" interface=lxc5c9f6ec825cc k8sPodName=openstack/keystone-api-79fb595cd7-5kj7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ef1277280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-api-79fb595cd7-5kj7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ef1277280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-api-79fb595cd7-5kj7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ef1277280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 identity=21733 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-api-79fb595cd7-5kj7t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ef1277280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 identity=21733 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-api-79fb595cd7-5kj7t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.218 807ed96e-4da9-4ad0-bc34-404c313d39c7 default }" containerID=62f85bffc1253110dfc8ced79fcbc28fb3ba483861509cc6d79d9cf86da5aae4 datapathConfiguration="&{false false false false false }" interface=lxc550320b344a2 k8sPodName=openstack/keystone-credential-setup-6xcs6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62f85bffc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-credential-setup-6xcs6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62f85bffc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e36126cb-0e09-4ac3-89c5-5f1e15f45480,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e36126cb-0e09-4ac3-89c5-5f1e15f45480,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-credential-setup-6xcs6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e36126cb-0e09-4ac3-89c5-5f1e15f45480;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=e36126cb-0e09-4ac3-89c5-5f1e15f45480;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62f85bffc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identity=47229 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e36126cb-0e09-4ac3-89c5-5f1e15f45480,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e36126cb-0e09-4ac3-89c5-5f1e15f45480,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-credential-setup-6xcs6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62f85bffc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identity=47229 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-credential-setup-6xcs6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ef1277280 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=232 identity=21733 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-api-79fb595cd7-5kj7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ef1277280 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=232 identity=21733 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-api-79fb595cd7-5kj7t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=62f85bffc1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=752 identity=47229 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-credential-setup-6xcs6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=62f85bffc1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=752 identity=47229 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-credential-setup-6xcs6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62f85bffc1 endpointID=752 k8sNamespace=openstack k8sPodName=keystone-credential-setup-6xcs6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e36126cb-0e09-4ac3-89c5-5f1e15f45480 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=e36126cb-0e09-4ac3-89c5-5f1e15f45480 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=62f85bffc1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=752 identity=47229 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-credential-setup-6xcs6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 e8170c5e-8475-454c-add6-db94564f906f default }" containerID=bd5c74009f1d25b9078b7c034d68a0a35bbb1e06f45df4fb9ddb5a0e5af96bd9 datapathConfiguration="&{false false false false false }" interface=lxc0b13100d7190 k8sPodName=openstack/keystone-db-init-v2m4g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd5c74009f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1650 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-init-v2m4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd5c74009f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1650 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3d003394-7d41-4b1a-acae-071784cfa143,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=3d003394-7d41-4b1a-acae-071784cfa143,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-init-v2m4g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bd5c74009f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1650 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-init-v2m4g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3d003394-7d41-4b1a-acae-071784cfa143;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=3d003394-7d41-4b1a-acae-071784cfa143;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd5c74009f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1650 identity=29426 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3d003394-7d41-4b1a-acae-071784cfa143,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=3d003394-7d41-4b1a-acae-071784cfa143,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-init-v2m4g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd5c74009f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1650 identity=29426 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-init-v2m4g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd5c74009f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1650 identity=29426 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-init-v2m4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd5c74009f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1650 identity=29426 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-init-v2m4g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd5c74009f endpointID=1650 k8sNamespace=openstack k8sPodName=keystone-db-init-v2m4g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3d003394-7d41-4b1a-acae-071784cfa143 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=3d003394-7d41-4b1a-acae-071784cfa143 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bd5c74009f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1650 identity=29426 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-init-v2m4g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 06d56d5c-4f8c-499b-831c-6c65204454c8 default }" containerID=4a676c15dcbe66f74a36986789e1509992360fb9abfb8cfbb57703e71163a38e datapathConfiguration="&{false false false false false }" interface=lxc48a42256256c k8sPodName=openstack/keystone-fernet-setup-j7jw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a676c15dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-j7jw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a676c15dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7bb9b6b2-efce-4cc9-a552-291d5e8149d5,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7bb9b6b2-efce-4cc9-a552-291d5e8149d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-j7jw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4a676c15dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-j7jw2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7bb9b6b2-efce-4cc9-a552-291d5e8149d5;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=7bb9b6b2-efce-4cc9-a552-291d5e8149d5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a676c15dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=25995 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7bb9b6b2-efce-4cc9-a552-291d5e8149d5,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7bb9b6b2-efce-4cc9-a552-291d5e8149d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-j7jw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a676c15dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=25995 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-j7jw2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a676c15dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=17 identity=25995 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-j7jw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a676c15dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=17 identity=25995 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-j7jw2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4a676c15dc endpointID=17 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-j7jw2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7bb9b6b2-efce-4cc9-a552-291d5e8149d5 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=7bb9b6b2-efce-4cc9-a552-291d5e8149d5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4a676c15dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=17 identity=25995 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-fernet-setup-j7jw2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 b6162fc4-2491-4e29-bf61-41f64ceb6a0f default }" containerID=fc9e546924ce144fbaed761f4468de20a886a9aa7091cb9a04ed552c5ccd0603 datapathConfiguration="&{false false false false false }" interface=lxca2246b1cce9c k8sPodName=openstack/keystone-db-sync-j8892 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc9e546924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-db-sync-j8892 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc9e546924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8dcdb5f4-b4f9-4f9c-89f9-d5dee3ab6b01,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=8dcdb5f4-b4f9-4f9c-89f9-d5dee3ab6b01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-db-sync-j8892 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8dcdb5f4-b4f9-4f9c-89f9-d5dee3ab6b01;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=8dcdb5f4-b4f9-4f9c-89f9-d5dee3ab6b01;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc9e546924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=42724 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8dcdb5f4-b4f9-4f9c-89f9-d5dee3ab6b01,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=8dcdb5f4-b4f9-4f9c-89f9-d5dee3ab6b01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-db-sync-j8892 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc9e546924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=42724 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-db-sync-j8892 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fc9e546924 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1103 identity=42724 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-db-sync-j8892 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc9e546924 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1103 identity=42724 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-db-sync-j8892 subsys=daemon level=info msg="Delete endpoint request" containerID=fc9e546924 endpointID=1103 k8sNamespace=openstack k8sPodName=keystone-db-sync-j8892 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8dcdb5f4-b4f9-4f9c-89f9-d5dee3ab6b01 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=8dcdb5f4-b4f9-4f9c-89f9-d5dee3ab6b01 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fc9e546924 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1103 identity=42724 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-db-sync-j8892 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 ff25dcce-f707-41b7-9690-8650f1a4148a default }" containerID=72c416e72f7eefe11b124dc0d061bddb565363e499b58e7ebccf1dc1a9410c8e datapathConfiguration="&{false false false false false }" interface=lxca9b9de07d814 k8sPodName=openstack/keystone-rabbit-init-9vx2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72c416e72f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-rabbit-init-9vx2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72c416e72f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=71cf2204-e55e-4227-8bdb-aa72b1fe19a8,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=71cf2204-e55e-4227-8bdb-aa72b1fe19a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-rabbit-init-9vx2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=71cf2204-e55e-4227-8bdb-aa72b1fe19a8;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=71cf2204-e55e-4227-8bdb-aa72b1fe19a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=72c416e72f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=16171 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=71cf2204-e55e-4227-8bdb-aa72b1fe19a8,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=71cf2204-e55e-4227-8bdb-aa72b1fe19a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-rabbit-init-9vx2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72c416e72f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=16171 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-rabbit-init-9vx2c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72c416e72f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=606 identity=16171 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-rabbit-init-9vx2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=72c416e72f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=16171 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-rabbit-init-9vx2c subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03324901592111137 newInterval=11m15s subsys=map-ct level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=72c416e72f endpointID=606 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-9vx2c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=71cf2204-e55e-4227-8bdb-aa72b1fe19a8 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=71cf2204-e55e-4227-8bdb-aa72b1fe19a8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=72c416e72f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=16171 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-rabbit-init-9vx2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 7ffdbb48-834c-4c2f-928d-6f8a03304a17 default }" containerID=a6f97a027c0c7924a2ba42013246a097310be698b46e97ceff9d615d19998a51 datapathConfiguration="&{false false false false false }" interface=lxc6b375ac805c3 k8sPodName=openstack/keystone-domain-manage-vjdbq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6f97a027c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-domain-manage-vjdbq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6f97a027c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fbfa3280-bc43-4066-9e1d-64c0ea86e8d9,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=fbfa3280-bc43-4066-9e1d-64c0ea86e8d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-domain-manage-vjdbq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fbfa3280-bc43-4066-9e1d-64c0ea86e8d9;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=fbfa3280-bc43-4066-9e1d-64c0ea86e8d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a6f97a027c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=15912 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fbfa3280-bc43-4066-9e1d-64c0ea86e8d9,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=fbfa3280-bc43-4066-9e1d-64c0ea86e8d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-domain-manage-vjdbq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6f97a027c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=15912 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-domain-manage-vjdbq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6f97a027c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=526 identity=15912 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-domain-manage-vjdbq subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6f97a027c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=526 identity=15912 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-domain-manage-vjdbq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a6f97a027c endpointID=526 k8sNamespace=openstack k8sPodName=keystone-domain-manage-vjdbq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fbfa3280-bc43-4066-9e1d-64c0ea86e8d9 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=fbfa3280-bc43-4066-9e1d-64c0ea86e8d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a6f97a027c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=526 identity=15912 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-domain-manage-vjdbq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 84fb7c0a-37aa-4618-8a02-ac34fc2450a0 default }" containerID=29dfe71a1c5cd3c17db8272b444e72e8a470db08b79eefe6da65e118f0971224 datapathConfiguration="&{false false false false false }" interface=lxc76b95af3da67 k8sPodName=openstack/keystone-bootstrap-dzf5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29dfe71a1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-bootstrap-dzf5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29dfe71a1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=db0184b1-418d-480b-a86f-b027bcb90f0f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=db0184b1-418d-480b-a86f-b027bcb90f0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-bootstrap-dzf5p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=29dfe71a1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-bootstrap-dzf5p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=db0184b1-418d-480b-a86f-b027bcb90f0f;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=db0184b1-418d-480b-a86f-b027bcb90f0f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29dfe71a1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 identity=16194 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=db0184b1-418d-480b-a86f-b027bcb90f0f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=db0184b1-418d-480b-a86f-b027bcb90f0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-bootstrap-dzf5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29dfe71a1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 identity=16194 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-bootstrap-dzf5p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29dfe71a1c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3164 identity=16194 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-bootstrap-dzf5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=29dfe71a1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3164 identity=16194 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-bootstrap-dzf5p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=29dfe71a1c endpointID=3164 k8sNamespace=openstack k8sPodName=keystone-bootstrap-dzf5p subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=db0184b1-418d-480b-a86f-b027bcb90f0f k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=db0184b1-418d-480b-a86f-b027bcb90f0f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=29dfe71a1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3164 identity=16194 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-bootstrap-dzf5p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 2995ffe4-a638-4e04-bddc-fc6bcaaa23e5 default }" containerID=b8fa7e43df9c4bf43ec57bf83c963855b3bb9cfba68ccd70a55071d3c0b3db8c datapathConfiguration="&{false false false false false }" interface=lxce51672f84032 k8sPodName=local-path-storage/helper-pod-create-pvc-f35972d5-78cd-44c6-879a-f2de40027814 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8fa7e43df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f35972d5-78cd-44c6-879a-f2de40027814 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8fa7e43df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f35972d5-78cd-44c6-879a-f2de40027814 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8fa7e43df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=20878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f35972d5-78cd-44c6-879a-f2de40027814 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8fa7e43df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=20878 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f35972d5-78cd-44c6-879a-f2de40027814 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8fa7e43df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=52 identity=20878 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f35972d5-78cd-44c6-879a-f2de40027814 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8fa7e43df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=52 identity=20878 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f35972d5-78cd-44c6-879a-f2de40027814 subsys=daemon level=info msg="Delete endpoint request" containerID=b8fa7e43df endpointID=52 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f35972d5-78cd-44c6-879a-f2de40027814 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b8fa7e43df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=52 identity=20878 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f35972d5-78cd-44c6-879a-f2de40027814 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 9fd35545-9a9a-46af-88bf-6ef587ed2ca7 default }" containerID=b183dbf0837f82d35519daf00d0b63881059c86782b03e77c1e2d8f3b47f8a69 datapathConfiguration="&{false false false false false }" interface=lxc67262e00513e k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b183dbf083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b183dbf083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b183dbf083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=51282 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b183dbf083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=51282 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b183dbf083 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=650 identity=51282 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b183dbf083 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=650 identity=51282 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.60 031197a6-2541-47b8-830b-bc5c371472c9 default }" containerID=26c56b5d4e17348367942894cadad1ddcb288e1b8577ab218e61e46be1a9b758 datapathConfiguration="&{false false false false false }" interface=lxc0e483c64781e k8sPodName=openstack/barbican-api-6968567fd7-9rznh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26c56b5d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-api-6968567fd7-9rznh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26c56b5d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-api-6968567fd7-9rznh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=26c56b5d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-api-6968567fd7-9rznh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26c56b5d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 identity=43967 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-api-6968567fd7-9rznh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26c56b5d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 identity=43967 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-api-6968567fd7-9rznh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26c56b5d4e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3197 identity=43967 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-api-6968567fd7-9rznh subsys=endpoint level=info msg="Successful endpoint creation" containerID=26c56b5d4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3197 identity=43967 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-api-6968567fd7-9rznh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.108 e3fbe677-15c7-47b4-a1b1-c5dde02122bc default }" containerID=ae1ff57e7ea2ea11d925d053aa90d7202ff9be1e1e1862599dab398fc999c210 datapathConfiguration="&{false false false false false }" interface=lxc3d963427a545 k8sPodName=openstack/barbican-db-init-xgsxc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae1ff57e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-db-init-xgsxc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae1ff57e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0b638e9d-2cd4-46e7-a50e-b3461eb46e06,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=0b638e9d-2cd4-46e7-a50e-b3461eb46e06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-db-init-xgsxc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0b638e9d-2cd4-46e7-a50e-b3461eb46e06;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=0b638e9d-2cd4-46e7-a50e-b3461eb46e06;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae1ff57e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=26637 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0b638e9d-2cd4-46e7-a50e-b3461eb46e06,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=0b638e9d-2cd4-46e7-a50e-b3461eb46e06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-db-init-xgsxc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae1ff57e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=26637 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-db-init-xgsxc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae1ff57e7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=45 identity=26637 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-db-init-xgsxc subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae1ff57e7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=26637 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-db-init-xgsxc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae1ff57e7e endpointID=45 k8sNamespace=openstack k8sPodName=barbican-db-init-xgsxc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0b638e9d-2cd4-46e7-a50e-b3461eb46e06 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=0b638e9d-2cd4-46e7-a50e-b3461eb46e06 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ae1ff57e7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=26637 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-db-init-xgsxc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 7304bcea-2284-4e89-8ae0-045d76364117 default }" containerID=97aee583378f295efac0bb10e947762742e7480731151250cbc50299af65b8ca datapathConfiguration="&{false false false false false }" interface=lxc712cda2abb15 k8sPodName=openstack/barbican-db-sync-vcmdm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97aee58337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-db-sync-vcmdm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97aee58337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d63f4e20-399c-4dfa-b6ec-a7f1130decec,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=d63f4e20-399c-4dfa-b6ec-a7f1130decec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-db-sync-vcmdm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=97aee58337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-db-sync-vcmdm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d63f4e20-399c-4dfa-b6ec-a7f1130decec;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=d63f4e20-399c-4dfa-b6ec-a7f1130decec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97aee58337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identity=23330 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d63f4e20-399c-4dfa-b6ec-a7f1130decec,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=d63f4e20-399c-4dfa-b6ec-a7f1130decec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-db-sync-vcmdm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97aee58337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identity=23330 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-db-sync-vcmdm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97aee58337 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2139 identity=23330 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-db-sync-vcmdm subsys=endpoint level=info msg="Successful endpoint creation" containerID=97aee58337 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2139 identity=23330 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-db-sync-vcmdm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=97aee58337 endpointID=2139 k8sNamespace=openstack k8sPodName=barbican-db-sync-vcmdm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d63f4e20-399c-4dfa-b6ec-a7f1130decec k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=d63f4e20-399c-4dfa-b6ec-a7f1130decec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=97aee58337 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2139 identity=23330 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-db-sync-vcmdm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 188bdabd-ecce-4e5d-b6bf-ddbd368f297d default }" containerID=382fdab985ff580dfc1c796b23f8c96150ba9ab13f5ca863a4899e9f0481125c datapathConfiguration="&{false false false false false }" interface=lxc16acc95a6360 k8sPodName=openstack/barbican-rabbit-init-pq6fd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=382fdab985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-rabbit-init-pq6fd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=382fdab985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=69501929-014a-4340-832f-f7c9e1979530,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=69501929-014a-4340-832f-f7c9e1979530,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-rabbit-init-pq6fd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=69501929-014a-4340-832f-f7c9e1979530;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=69501929-014a-4340-832f-f7c9e1979530;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=382fdab985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 identity=17008 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=69501929-014a-4340-832f-f7c9e1979530,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=69501929-014a-4340-832f-f7c9e1979530,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-rabbit-init-pq6fd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=382fdab985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 identity=17008 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-rabbit-init-pq6fd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=382fdab985 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=323 identity=17008 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-rabbit-init-pq6fd subsys=endpoint level=info msg="Successful endpoint creation" containerID=382fdab985 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=323 identity=17008 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-rabbit-init-pq6fd subsys=daemon level=info msg="Delete endpoint request" containerID=382fdab985 endpointID=323 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-pq6fd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=69501929-014a-4340-832f-f7c9e1979530 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=69501929-014a-4340-832f-f7c9e1979530 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=382fdab985 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=323 identity=17008 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-rabbit-init-pq6fd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 26f94dde-c8b0-4f84-95e8-e6c0e02df287 default }" containerID=77e3a20b81e94b3ed15879dfaacd2b079f5ea27a415fd1581c37cd59bffbc2f2 datapathConfiguration="&{false false false false false }" interface=lxc507425759385 k8sPodName=openstack/barbican-ks-service-t5wzc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77e3a20b81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-ks-service-t5wzc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77e3a20b81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b8c3cc85-7b39-4b3c-a047-1b5f33726c32,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=b8c3cc85-7b39-4b3c-a047-1b5f33726c32,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-ks-service-t5wzc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b8c3cc85-7b39-4b3c-a047-1b5f33726c32;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=b8c3cc85-7b39-4b3c-a047-1b5f33726c32;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77e3a20b81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 identity=24304 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b8c3cc85-7b39-4b3c-a047-1b5f33726c32,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=b8c3cc85-7b39-4b3c-a047-1b5f33726c32,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-ks-service-t5wzc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77e3a20b81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 identity=24304 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-ks-service-t5wzc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77e3a20b81 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3993 identity=24304 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-ks-service-t5wzc subsys=endpoint level=info msg="Successful endpoint creation" containerID=77e3a20b81 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3993 identity=24304 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-ks-service-t5wzc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=77e3a20b81 endpointID=3993 k8sNamespace=openstack k8sPodName=barbican-ks-service-t5wzc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b8c3cc85-7b39-4b3c-a047-1b5f33726c32 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=b8c3cc85-7b39-4b3c-a047-1b5f33726c32 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=77e3a20b81 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3993 identity=24304 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-ks-service-t5wzc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 22cc9bf7-8ab8-4166-9202-9aa9997a96b5 default }" containerID=4feb4effc26b3fa2e4af7cdf63c392b6b077905b630011d6407a6a875b288503 datapathConfiguration="&{false false false false false }" interface=lxc7921bfd8903e k8sPodName=openstack/barbican-ks-endpoints-8cg92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4feb4effc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3908 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8cg92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4feb4effc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3908 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0ce735d5-470f-4f72-bae9-2f311fba67af,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0ce735d5-470f-4f72-bae9-2f311fba67af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8cg92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4feb4effc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3908 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8cg92 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0ce735d5-470f-4f72-bae9-2f311fba67af;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0ce735d5-470f-4f72-bae9-2f311fba67af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4feb4effc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3908 identity=2773 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0ce735d5-470f-4f72-bae9-2f311fba67af,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0ce735d5-470f-4f72-bae9-2f311fba67af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8cg92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4feb4effc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3908 identity=2773 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8cg92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4feb4effc2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3908 identity=2773 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8cg92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4feb4effc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3908 identity=2773 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8cg92 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4feb4effc2 endpointID=3908 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-8cg92 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0ce735d5-470f-4f72-bae9-2f311fba67af k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0ce735d5-470f-4f72-bae9-2f311fba67af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4feb4effc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3908 identity=2773 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8cg92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 d8cfb872-5997-4785-9368-6d85cb3fd00e default }" containerID=f2e59f1542ea5d354c27b90b2469d51e9ad9255de39a6a0a3b42c1bd2c343ed1 datapathConfiguration="&{false false false false false }" interface=lxcb0e5624718dc k8sPodName=openstack/barbican-ks-user-p7ctf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2e59f1542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-user-p7ctf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2e59f1542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3e905bcd-7667-45b0-aac8-67e8a072b63d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=3e905bcd-7667-45b0-aac8-67e8a072b63d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-user-p7ctf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3e905bcd-7667-45b0-aac8-67e8a072b63d;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=3e905bcd-7667-45b0-aac8-67e8a072b63d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2e59f1542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=34927 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3e905bcd-7667-45b0-aac8-67e8a072b63d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=3e905bcd-7667-45b0-aac8-67e8a072b63d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-user-p7ctf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f2e59f1542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=34927 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-user-p7ctf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2e59f1542 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=905 identity=34927 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-user-p7ctf subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2e59f1542 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=34927 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-user-p7ctf subsys=daemon level=info msg="Delete endpoint request" containerID=f2e59f1542 endpointID=905 k8sNamespace=openstack k8sPodName=barbican-ks-user-p7ctf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3e905bcd-7667-45b0-aac8-67e8a072b63d k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=3e905bcd-7667-45b0-aac8-67e8a072b63d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f2e59f1542 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=34927 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-user-p7ctf subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.219 59246fbe-d21b-4d24-ade2-e1919c65a288 default }" containerID=418a14b1d8a2aaac22caaeae62081558c7a93858f687dfb911bf032e60301d11 datapathConfiguration="&{false false false false false }" interface=lxc962d9e9ba1b8 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cgm6l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=418a14b1d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cgm6l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=418a14b1d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cgm6l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=418a14b1d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identity=30291 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cgm6l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=418a14b1d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identity=30291 ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cgm6l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=418a14b1d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1940 identity=30291 ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cgm6l subsys=endpoint level=info msg="Successful endpoint creation" containerID=418a14b1d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1940 identity=30291 ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cgm6l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.131 81b1cc80-6f49-447b-a4d8-d0fa2a03d4ef default }" containerID=d4422596ebfe62d501e469e40554e98b48d76b9f95c641466bd9a0ca73653ce0 datapathConfiguration="&{false false false false false }" interface=lxcf26d2f6631f3 k8sPodName=openstack/rook-ceph-detect-version-gzp76 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4422596eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gzp76 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4422596eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=76e6a528-bf11-402b-9445-d1dba4609b74,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=76e6a528-bf11-402b-9445-d1dba4609b74,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gzp76 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=76e6a528-bf11-402b-9445-d1dba4609b74;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=76e6a528-bf11-402b-9445-d1dba4609b74;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4422596eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identity=7815 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=76e6a528-bf11-402b-9445-d1dba4609b74,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=76e6a528-bf11-402b-9445-d1dba4609b74,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gzp76 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4422596eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identity=7815 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gzp76 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4422596eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=44 identity=7815 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gzp76 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4422596eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=44 identity=7815 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gzp76 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d4422596eb endpointID=44 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-gzp76 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=76e6a528-bf11-402b-9445-d1dba4609b74 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=76e6a528-bf11-402b-9445-d1dba4609b74 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=d4422596eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=44 identity=7815 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gzp76 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 556fbed9-f43d-40b1-9bb1-162b98c01fa5 default }" containerID=86f2dca0c453515db2845f1743a753aa2fc139dac1f5f99e5aefda63ef013e6b datapathConfiguration="&{false false false false false }" interface=lxcf96cc5c595a1 k8sPodName=openstack/ceph-object-controller-detect-version-cxwjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86f2dca0c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-cxwjn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86f2dca0c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=6c772bed-d968-4a13-b925-9683de07adff,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=6c772bed-d968-4a13-b925-9683de07adff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-cxwjn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=6c772bed-d968-4a13-b925-9683de07adff;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=6c772bed-d968-4a13-b925-9683de07adff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86f2dca0c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identity=47685 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=6c772bed-d968-4a13-b925-9683de07adff,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=6c772bed-d968-4a13-b925-9683de07adff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-cxwjn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86f2dca0c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identity=47685 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-cxwjn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86f2dca0c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1586 identity=47685 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-cxwjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=86f2dca0c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1586 identity=47685 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-cxwjn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=86f2dca0c4 endpointID=1586 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-cxwjn subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=6c772bed-d968-4a13-b925-9683de07adff k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=6c772bed-d968-4a13-b925-9683de07adff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=86f2dca0c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1586 identity=47685 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-cxwjn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 6764c36e-b45f-4f06-9522-a5e381a48098 default }" containerID=2b591141d219b6615bd77b3066720061b6b65f884f35216a5ea7081059fdb6f8 datapathConfiguration="&{false false false false false }" interface=lxce3f27703ca72 k8sPodName=local-path-storage/helper-pod-create-pvc-d2f99925-5ccd-4950-9d6a-997831067263 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b591141d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1923 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2f99925-5ccd-4950-9d6a-997831067263 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b591141d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1923 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2f99925-5ccd-4950-9d6a-997831067263 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b591141d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1923 identity=20878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2f99925-5ccd-4950-9d6a-997831067263 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b591141d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1923 identity=20878 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2f99925-5ccd-4950-9d6a-997831067263 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b591141d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1923 identity=20878 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2f99925-5ccd-4950-9d6a-997831067263 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b591141d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1923 identity=20878 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2f99925-5ccd-4950-9d6a-997831067263 subsys=daemon level=info msg="Delete endpoint request" containerID=2b591141d2 endpointID=1923 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d2f99925-5ccd-4950-9d6a-997831067263 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2b591141d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1923 identity=20878 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d2f99925-5ccd-4950-9d6a-997831067263 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 b373e0c3-327f-4fba-8323-eb866fda1b7f default }" containerID=f5d621a06e97ee81b2aed00789cc1d041ea6b5ff9a0e82ed08188e908ddd8d92 datapathConfiguration="&{false false false false false }" interface=lxc6519abd5e837 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5d621a06e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5d621a06e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f5d621a06e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5d621a06e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identity=6747 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5d621a06e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identity=6747 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5d621a06e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1622 identity=6747 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5d621a06e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1622 identity=6747 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.247 3381fd4b-9763-421b-bf9a-36cbbd6b99f7 default }" containerID=a0ce574a8c46c6e1db248a1b628fdf635bee3f5941309b46e393c33625d640e0 datapathConfiguration="&{false false false false false }" interface=lxcd9aa20b83016 k8sPodName=openstack/glance-db-init-5dsqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0ce574a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-db-init-5dsqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0ce574a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9b4db7d7-0699-4170-a866-824abf00efad,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9b4db7d7-0699-4170-a866-824abf00efad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-db-init-5dsqj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9b4db7d7-0699-4170-a866-824abf00efad;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=9b4db7d7-0699-4170-a866-824abf00efad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0ce574a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identity=16535 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9b4db7d7-0699-4170-a866-824abf00efad,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9b4db7d7-0699-4170-a866-824abf00efad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-db-init-5dsqj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a0ce574a8c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=541 identity=16535 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-db-init-5dsqj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a0ce574a8c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=541 identity=16535 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-db-init-5dsqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0ce574a8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=541 identity=16535 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-db-init-5dsqj subsys=daemon level=info msg="Delete endpoint request" containerID=a0ce574a8c endpointID=541 k8sNamespace=openstack k8sPodName=glance-db-init-5dsqj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9b4db7d7-0699-4170-a866-824abf00efad k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=9b4db7d7-0699-4170-a866-824abf00efad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a0ce574a8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=541 identity=16535 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-db-init-5dsqj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 c133b2e4-92b1-4f5c-8660-f2b60131443b default }" containerID=be06287d8e50bc74d9d7240b3895d6ded248ccefffd78e788d661546a21c0981 datapathConfiguration="&{false false false false false }" interface=lxc64cd7797dd83 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xhlrw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be06287d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xhlrw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be06287d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xhlrw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be06287d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=644 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xhlrw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be06287d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=644 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xhlrw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.158 08f786fa-b134-43c9-98ab-b00cac60e093 default }" containerID=29bdbab0f39b6a6ac3adc24970e447cf7776baadb4589227907ce9a78c5b43e5 datapathConfiguration="&{false false false false false }" interface=lxcfe7da3153b8b k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rmvfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29bdbab0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rmvfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29bdbab0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rmvfh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29bdbab0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=60900 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rmvfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29bdbab0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=60900 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rmvfh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be06287d8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1046 identity=644 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xhlrw subsys=endpoint level=info msg="Successful endpoint creation" containerID=be06287d8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1046 identity=644 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xhlrw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=29bdbab0f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=803 identity=60900 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rmvfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=29bdbab0f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=803 identity=60900 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rmvfh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 20f36fa1-53b6-4fb2-8678-713be22ba64d default }" containerID=f0fb2eb90c133b041cafbca3a5143037a252604e0e885514deb4e67b56981b90 datapathConfiguration="&{false false false false false }" interface=lxc08b84b3c5c7d k8sPodName=openstack/glance-db-sync-wz9dr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0fb2eb90c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-db-sync-wz9dr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0fb2eb90c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4e060ed9-08fd-4f5e-9f69-d30cd31c4519,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=4e060ed9-08fd-4f5e-9f69-d30cd31c4519,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-db-sync-wz9dr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4e060ed9-08fd-4f5e-9f69-d30cd31c4519;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=4e060ed9-08fd-4f5e-9f69-d30cd31c4519;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0fb2eb90c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 identity=29685 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4e060ed9-08fd-4f5e-9f69-d30cd31c4519,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=4e060ed9-08fd-4f5e-9f69-d30cd31c4519,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-db-sync-wz9dr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0fb2eb90c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 identity=29685 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-db-sync-wz9dr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0fb2eb90c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2772 identity=29685 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-db-sync-wz9dr subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0fb2eb90c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2772 identity=29685 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-db-sync-wz9dr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f0fb2eb90c endpointID=2772 k8sNamespace=openstack k8sPodName=glance-db-sync-wz9dr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4e060ed9-08fd-4f5e-9f69-d30cd31c4519 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=4e060ed9-08fd-4f5e-9f69-d30cd31c4519 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f0fb2eb90c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2772 identity=29685 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-db-sync-wz9dr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 b0c10785-6350-44bc-9839-12188521a237 default }" containerID=a851063e65dd2a6f94ce516d53647a6c935a714f74a64eedc494b276f241fe8e datapathConfiguration="&{false false false false false }" interface=lxc2801abd1883e k8sPodName=openstack/glance-rabbit-init-gmf4x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a851063e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2968 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-gmf4x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a851063e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2968 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab21567e-31f0-4ff7-8c69-0e49daa15a0c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ab21567e-31f0-4ff7-8c69-0e49daa15a0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-gmf4x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a851063e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2968 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-gmf4x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ab21567e-31f0-4ff7-8c69-0e49daa15a0c;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ab21567e-31f0-4ff7-8c69-0e49daa15a0c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a851063e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2968 identity=6323 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab21567e-31f0-4ff7-8c69-0e49daa15a0c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ab21567e-31f0-4ff7-8c69-0e49daa15a0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-gmf4x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a851063e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2968 identity=6323 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-gmf4x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a851063e65 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2968 identity=6323 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-gmf4x subsys=endpoint level=info msg="Successful endpoint creation" containerID=a851063e65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2968 identity=6323 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-gmf4x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a851063e65 endpointID=2968 k8sNamespace=openstack k8sPodName=glance-rabbit-init-gmf4x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ab21567e-31f0-4ff7-8c69-0e49daa15a0c k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ab21567e-31f0-4ff7-8c69-0e49daa15a0c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a851063e65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2968 identity=6323 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-gmf4x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 ad57e036-e6c4-4807-9419-3c3d15534cf8 default }" containerID=43de64aa6edc33c3b66098ac31096b2ab72ce80b047577ddaec7bc0f60f9ffcf datapathConfiguration="&{false false false false false }" interface=lxcf581f22ec387 k8sPodName=openstack/glance-ks-service-7rvhf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43de64aa6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-ks-service-7rvhf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43de64aa6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=56a6b1e9-2026-41f4-9796-35be18d8ea17,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=56a6b1e9-2026-41f4-9796-35be18d8ea17,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-ks-service-7rvhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=56a6b1e9-2026-41f4-9796-35be18d8ea17;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=56a6b1e9-2026-41f4-9796-35be18d8ea17;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43de64aa6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identity=50060 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=56a6b1e9-2026-41f4-9796-35be18d8ea17,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=56a6b1e9-2026-41f4-9796-35be18d8ea17,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-ks-service-7rvhf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43de64aa6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identity=50060 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-ks-service-7rvhf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=43de64aa6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=987 identity=50060 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-ks-service-7rvhf subsys=endpoint level=info msg="Successful endpoint creation" containerID=43de64aa6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=987 identity=50060 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-ks-service-7rvhf subsys=daemon level=info msg="Delete endpoint request" containerID=43de64aa6e endpointID=987 k8sNamespace=openstack k8sPodName=glance-ks-service-7rvhf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=56a6b1e9-2026-41f4-9796-35be18d8ea17 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=56a6b1e9-2026-41f4-9796-35be18d8ea17 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=43de64aa6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=987 identity=50060 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-ks-service-7rvhf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 a63dd3fc-7b79-4c33-b062-6d165ea0c022 default }" containerID=2a9a9fa69ef865fd0541e02aa985aba7c4b6894acd674336be5f706f80740ee4 datapathConfiguration="&{false false false false false }" interface=lxcd169f942ea4b k8sPodName=openstack/glance-ks-endpoints-vds57 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a9a9fa69e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-endpoints-vds57 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a9a9fa69e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fea06df8-7b32-48b4-b309-bafcab3c9823,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=fea06df8-7b32-48b4-b309-bafcab3c9823,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-endpoints-vds57 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2a9a9fa69e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-endpoints-vds57 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fea06df8-7b32-48b4-b309-bafcab3c9823;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=fea06df8-7b32-48b4-b309-bafcab3c9823;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a9a9fa69e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 identity=14682 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fea06df8-7b32-48b4-b309-bafcab3c9823,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=fea06df8-7b32-48b4-b309-bafcab3c9823,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-endpoints-vds57 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a9a9fa69e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 identity=14682 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-endpoints-vds57 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a9a9fa69e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1437 identity=14682 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-endpoints-vds57 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a9a9fa69e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1437 identity=14682 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-endpoints-vds57 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2a9a9fa69e endpointID=1437 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-vds57 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fea06df8-7b32-48b4-b309-bafcab3c9823 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=fea06df8-7b32-48b4-b309-bafcab3c9823 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2a9a9fa69e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1437 identity=14682 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-endpoints-vds57 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 af95711d-c87c-4bf9-8b57-efcc152aa457 default }" containerID=a20f2227acd170b870356b73471fce4671d567a162f88e84a9081f02eb181156 datapathConfiguration="&{false false false false false }" interface=lxc1b4dc31ec820 k8sPodName=openstack/glance-ks-user-dsqpl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a20f2227ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-user-dsqpl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a20f2227ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5c791216-44a9-4047-9bb7-3d7aaed53d46,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=5c791216-44a9-4047-9bb7-3d7aaed53d46,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-user-dsqpl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5c791216-44a9-4047-9bb7-3d7aaed53d46;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=5c791216-44a9-4047-9bb7-3d7aaed53d46;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a20f2227ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 identity=936 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5c791216-44a9-4047-9bb7-3d7aaed53d46,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=5c791216-44a9-4047-9bb7-3d7aaed53d46,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-user-dsqpl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a20f2227ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 identity=936 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-user-dsqpl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a20f2227ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2385 identity=936 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-user-dsqpl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a20f2227ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2385 identity=936 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-user-dsqpl subsys=daemon level=info msg="Delete endpoint request" containerID=a20f2227ac endpointID=2385 k8sNamespace=openstack k8sPodName=glance-ks-user-dsqpl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5c791216-44a9-4047-9bb7-3d7aaed53d46 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=5c791216-44a9-4047-9bb7-3d7aaed53d46 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a20f2227ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2385 identity=936 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-user-dsqpl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 1bd39d1f-cba2-42c0-9f57-1cf7715c465a default }" containerID=2fc3818ef10aa13f4c32e9b02c25fb51aeb677809f654cfc049f121920b080e1 datapathConfiguration="&{false false false false false }" interface=lxcf2be1028cf0d k8sPodName=openstack/glance-metadefs-load-nmjpj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fc3818ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-nmjpj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fc3818ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=24528696-7ff0-48da-84be-8d28541602c0,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=24528696-7ff0-48da-84be-8d28541602c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-nmjpj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=24528696-7ff0-48da-84be-8d28541602c0;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=24528696-7ff0-48da-84be-8d28541602c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fc3818ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identity=2793 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=24528696-7ff0-48da-84be-8d28541602c0,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=24528696-7ff0-48da-84be-8d28541602c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-nmjpj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fc3818ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identity=2793 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-nmjpj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fc3818ef1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3401 identity=2793 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-nmjpj subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fc3818ef1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3401 identity=2793 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-nmjpj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2fc3818ef1 endpointID=3401 k8sNamespace=openstack k8sPodName=glance-metadefs-load-nmjpj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=24528696-7ff0-48da-84be-8d28541602c0 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=24528696-7ff0-48da-84be-8d28541602c0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2fc3818ef1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3401 identity=2793 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-nmjpj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 806e830b-6832-4a1c-bc27-93b10b14ccfb default }" containerID=b0abd01447a71b67af91bff5f574bbe6015d81662e45856916d826bfe5e26cd8 datapathConfiguration="&{false false false false false }" interface=lxc22c398a4fafc k8sPodName=openstack/glance-storage-init-fnw6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0abd01447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-fnw6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0abd01447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=657847a8-8047-4d13-af3f-029c88abe07f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=657847a8-8047-4d13-af3f-029c88abe07f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-fnw6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=657847a8-8047-4d13-af3f-029c88abe07f;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=657847a8-8047-4d13-af3f-029c88abe07f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0abd01447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=58048 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=657847a8-8047-4d13-af3f-029c88abe07f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=657847a8-8047-4d13-af3f-029c88abe07f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-fnw6v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0abd01447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=58048 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-fnw6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0abd01447 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1389 identity=58048 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-fnw6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0abd01447 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=58048 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-fnw6v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b0abd01447 endpointID=1389 k8sNamespace=openstack k8sPodName=glance-storage-init-fnw6v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=657847a8-8047-4d13-af3f-029c88abe07f k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=657847a8-8047-4d13-af3f-029c88abe07f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b0abd01447 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=58048 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-storage-init-fnw6v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 8cc6e1dd-88d5-4e53-917c-87827395f022 default }" containerID=ae900b7fd04131a6f56f428ba645a52a2fc5818cf35810b91d8d367d585ea32a datapathConfiguration="&{false false false false false }" interface=lxc32b7455ef510 k8sPodName=openstack/glance-api-7959f7f49b-cwv4q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae900b7fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-api-7959f7f49b-cwv4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae900b7fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-api-7959f7f49b-cwv4q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ae900b7fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-api-7959f7f49b-cwv4q line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ae900b7fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identity=47231 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-api-7959f7f49b-cwv4q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae900b7fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identity=47231 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-api-7959f7f49b-cwv4q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae900b7fd0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=949 identity=47231 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-api-7959f7f49b-cwv4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae900b7fd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=949 identity=47231 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-api-7959f7f49b-cwv4q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.160 10e260cc-2bcf-449d-9128-49e051fdf453 default }" containerID=5dfe7d54dda018af82171b14a83ce23d39dded5453e5df299a94ea7ba966bfb4 datapathConfiguration="&{false false false false false }" interface=lxc6d8baf3b0839 k8sPodName=openstack/staffeln-api-6c8b4d8757-kmzbh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5dfe7d54dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-api-6c8b4d8757-kmzbh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5dfe7d54dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-api-6c8b4d8757-kmzbh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5dfe7d54dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identity=54309 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-api-6c8b4d8757-kmzbh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5dfe7d54dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identity=54309 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-api-6c8b4d8757-kmzbh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5dfe7d54dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3142 identity=54309 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-api-6c8b4d8757-kmzbh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5dfe7d54dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3142 identity=54309 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-api-6c8b4d8757-kmzbh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.84 821d845f-7942-450b-a2c9-2d0c1351efec default }" containerID=1261c34a99be7185e7c68d05b4fa3ad262ac6c7b0c1888c67cdf4b290bfa407c datapathConfiguration="&{false false false false false }" interface=lxcc33c5d7fd7a1 k8sPodName=openstack/staffeln-conductor-77d697f4cd-pt2pf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1261c34a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-conductor-77d697f4cd-pt2pf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1261c34a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-conductor-77d697f4cd-pt2pf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.188 60180727-353c-4356-865f-6a0bd6bab6d4 default }" containerID=a216c5d2f06802f3b5c7ece06530680c8657dabe604302dd02742514415f9492 datapathConfiguration="&{false false false false false }" interface=lxccc6b6fbb950e k8sPodName=openstack/staffeln-db-init-l5v69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a216c5d2f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/staffeln-db-init-l5v69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a216c5d2f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=2878bbac-c643-416b-9edc-a043aa5548f9,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=2878bbac-c643-416b-9edc-a043aa5548f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/staffeln-db-init-l5v69 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=1261c34a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identity=2531 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-conductor-77d697f4cd-pt2pf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1261c34a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identity=2531 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-conductor-77d697f4cd-pt2pf subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=2878bbac-c643-416b-9edc-a043aa5548f9;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=2878bbac-c643-416b-9edc-a043aa5548f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a216c5d2f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 identity=39584 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=2878bbac-c643-416b-9edc-a043aa5548f9,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=2878bbac-c643-416b-9edc-a043aa5548f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/staffeln-db-init-l5v69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a216c5d2f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 identity=39584 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/staffeln-db-init-l5v69 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1261c34a99 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1235 identity=2531 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-conductor-77d697f4cd-pt2pf subsys=endpoint level=info msg="Successful endpoint creation" containerID=1261c34a99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1235 identity=2531 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-conductor-77d697f4cd-pt2pf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a216c5d2f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2993 identity=39584 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/staffeln-db-init-l5v69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a216c5d2f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2993 identity=39584 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/staffeln-db-init-l5v69 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a216c5d2f0 endpointID=2993 k8sNamespace=openstack k8sPodName=staffeln-db-init-l5v69 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=2878bbac-c643-416b-9edc-a043aa5548f9 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=2878bbac-c643-416b-9edc-a043aa5548f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=a216c5d2f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2993 identity=39584 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/staffeln-db-init-l5v69 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 db7a8fcc-7c7d-4abf-b0d7-23c713b7db08 default }" containerID=0b080c7c2ab67334121fbe12a80d149dbb054509d6b7110d297cb42838ad70a7 datapathConfiguration="&{false false false false false }" interface=lxcecdfedafd034 k8sPodName=openstack/staffeln-db-sync-v8kn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b080c7c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1526 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-db-sync-v8kn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b080c7c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1526 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c46e8ad0-2b00-4b66-8324-d71fb1597904,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c46e8ad0-2b00-4b66-8324-d71fb1597904,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-db-sync-v8kn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=c46e8ad0-2b00-4b66-8324-d71fb1597904;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=c46e8ad0-2b00-4b66-8324-d71fb1597904;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b080c7c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1526 identity=56669 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c46e8ad0-2b00-4b66-8324-d71fb1597904,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c46e8ad0-2b00-4b66-8324-d71fb1597904,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-db-sync-v8kn6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b080c7c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1526 identity=56669 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-db-sync-v8kn6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b080c7c2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1526 identity=56669 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-db-sync-v8kn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b080c7c2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1526 identity=56669 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-db-sync-v8kn6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0b080c7c2a endpointID=1526 k8sNamespace=openstack k8sPodName=staffeln-db-sync-v8kn6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=c46e8ad0-2b00-4b66-8324-d71fb1597904 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=c46e8ad0-2b00-4b66-8324-d71fb1597904 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=0b080c7c2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1526 identity=56669 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-db-sync-v8kn6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 502a0f6c-6ad8-4095-8c17-7fad69c72a4e default }" containerID=8f89d8bee5a44f2fb6a940c1f81db2642228234ec92d378508b8285e8edcaa80 datapathConfiguration="&{false false false false false }" interface=lxc0f92f93567eb k8sPodName=local-path-storage/helper-pod-create-pvc-ea42ded5-505e-43e5-b11d-916f53b1e053 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f89d8bee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea42ded5-505e-43e5-b11d-916f53b1e053 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f89d8bee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea42ded5-505e-43e5-b11d-916f53b1e053 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f89d8bee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=20878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea42ded5-505e-43e5-b11d-916f53b1e053 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f89d8bee5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=20878 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea42ded5-505e-43e5-b11d-916f53b1e053 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f89d8bee5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1389 identity=20878 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea42ded5-505e-43e5-b11d-916f53b1e053 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f89d8bee5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=20878 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea42ded5-505e-43e5-b11d-916f53b1e053 subsys=daemon level=info msg="Delete endpoint request" containerID=8f89d8bee5 endpointID=1389 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ea42ded5-505e-43e5-b11d-916f53b1e053 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8f89d8bee5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=20878 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea42ded5-505e-43e5-b11d-916f53b1e053 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 b99edd0f-2fc8-4161-ac46-fb61aaa5834f default }" containerID=71568f81c86ba540ba7724bc279bbdcdffc3c311a24593d95117c14f14626746 datapathConfiguration="&{false false false false false }" interface=lxc7b65a6d29400 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71568f81c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1891 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71568f81c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1891 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71568f81c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1891 identity=64259 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71568f81c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1891 identity=64259 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=71568f81c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1891 identity=64259 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=71568f81c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1891 identity=64259 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.87 b1d14319-56ef-4de1-a199-3493c4a4cccd default }" containerID=eb0ccc55c9033acd2f220a2a67f53159eec263941b3133e7ff1e05ace49f2355 datapathConfiguration="&{false false false false false }" interface=lxcfc3c71cda50b k8sPodName=openstack/cinder-scheduler-785ff79b9f-mc92l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb0ccc55c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-scheduler-785ff79b9f-mc92l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb0ccc55c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-scheduler-785ff79b9f-mc92l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb0ccc55c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identity=34864 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-scheduler-785ff79b9f-mc92l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb0ccc55c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identity=34864 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-scheduler-785ff79b9f-mc92l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 dff825d4-0b6d-4945-a996-f152b77b2bf5 default }" containerID=03c3628ff55068351568e4ba6906b9cfe9879834f046a9daf3c0b480dda55044 datapathConfiguration="&{false false false false false }" interface=lxc8cbb0e850712 k8sPodName=openstack/cinder-api-85d464849c-krxjf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03c3628ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3392 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/cinder-api-85d464849c-krxjf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03c3628ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3392 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/cinder-api-85d464849c-krxjf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03c3628ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3392 identity=48700 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/cinder-api-85d464849c-krxjf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03c3628ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3392 identity=48700 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/cinder-api-85d464849c-krxjf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb0ccc55c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1824 identity=34864 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-scheduler-785ff79b9f-mc92l subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb0ccc55c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1824 identity=34864 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-scheduler-785ff79b9f-mc92l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 4b6e718d-cb39-4904-a25c-29a33051a545 default }" containerID=48288a4791a651968d9c871d51a8c91e9a542663b5757ac071416c3b372bd780 datapathConfiguration="&{false false false false false }" interface=lxc304abbbfe492 k8sPodName=openstack/cinder-db-init-glkcr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48288a4791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-db-init-glkcr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48288a4791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2740cf78-5523-48ed-bc57-e57c0497799d,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=2740cf78-5523-48ed-bc57-e57c0497799d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-db-init-glkcr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=2740cf78-5523-48ed-bc57-e57c0497799d;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=2740cf78-5523-48ed-bc57-e57c0497799d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48288a4791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 identity=51458 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2740cf78-5523-48ed-bc57-e57c0497799d,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=2740cf78-5523-48ed-bc57-e57c0497799d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-db-init-glkcr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48288a4791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 identity=51458 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-db-init-glkcr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03c3628ff5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3392 identity=48700 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/cinder-api-85d464849c-krxjf subsys=endpoint level=info msg="Successful endpoint creation" containerID=03c3628ff5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3392 identity=48700 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/cinder-api-85d464849c-krxjf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=48288a4791 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3054 identity=51458 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-db-init-glkcr subsys=endpoint level=info msg="Successful endpoint creation" containerID=48288a4791 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3054 identity=51458 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-db-init-glkcr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48288a4791 endpointID=3054 k8sNamespace=openstack k8sPodName=cinder-db-init-glkcr subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=2740cf78-5523-48ed-bc57-e57c0497799d k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=2740cf78-5523-48ed-bc57-e57c0497799d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=48288a4791 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3054 identity=51458 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-db-init-glkcr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 19e1be88-80bf-4261-8d7a-5659ba679e08 default }" containerID=abaa25fa93c4de52942c011dea38c8d17dbc8fb10a3143f0da10a1a3eeefce10 datapathConfiguration="&{false false false false false }" interface=lxcd3dc3a060420 k8sPodName=openstack/cinder-db-sync-gjwt8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abaa25fa93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1587 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-db-sync-gjwt8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abaa25fa93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1587 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b2c63ebb-8811-4a9b-b009-066a511f6c0e,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=b2c63ebb-8811-4a9b-b009-066a511f6c0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-db-sync-gjwt8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=b2c63ebb-8811-4a9b-b009-066a511f6c0e;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=b2c63ebb-8811-4a9b-b009-066a511f6c0e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abaa25fa93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1587 identity=41104 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b2c63ebb-8811-4a9b-b009-066a511f6c0e,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=b2c63ebb-8811-4a9b-b009-066a511f6c0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-db-sync-gjwt8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abaa25fa93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1587 identity=41104 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-db-sync-gjwt8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=abaa25fa93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1587 identity=41104 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-db-sync-gjwt8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abaa25fa93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1587 identity=41104 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-db-sync-gjwt8 subsys=daemon level=info msg="Delete endpoint request" containerID=abaa25fa93 endpointID=1587 k8sNamespace=openstack k8sPodName=cinder-db-sync-gjwt8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=b2c63ebb-8811-4a9b-b009-066a511f6c0e k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=b2c63ebb-8811-4a9b-b009-066a511f6c0e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=abaa25fa93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1587 identity=41104 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-db-sync-gjwt8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 fb059f61-a008-4489-a6ea-13c33ccb361f default }" containerID=9e432333d0bd8096634418252f5925afbb6172be364a910a1d9a44329052b012 datapathConfiguration="&{false false false false false }" interface=lxcd5593c6511ce k8sPodName=openstack/cinder-rabbit-init-rfwsd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e432333d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3445 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/cinder-rabbit-init-rfwsd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e432333d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3445 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=777b6634-0e45-400a-96bc-0653b8313e43,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=777b6634-0e45-400a-96bc-0653b8313e43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/cinder-rabbit-init-rfwsd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=777b6634-0e45-400a-96bc-0653b8313e43;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=777b6634-0e45-400a-96bc-0653b8313e43;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9e432333d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3445 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=openstack/cinder-rabbit-init-rfwsd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9e432333d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3445 identity=2090 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=777b6634-0e45-400a-96bc-0653b8313e43,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=777b6634-0e45-400a-96bc-0653b8313e43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/cinder-rabbit-init-rfwsd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e432333d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3445 identity=2090 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/cinder-rabbit-init-rfwsd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e432333d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3445 identity=2090 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/cinder-rabbit-init-rfwsd subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e432333d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3445 identity=2090 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/cinder-rabbit-init-rfwsd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9e432333d0 endpointID=3445 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-rfwsd subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=777b6634-0e45-400a-96bc-0653b8313e43 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=777b6634-0e45-400a-96bc-0653b8313e43 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9e432333d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3445 identity=2090 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/cinder-rabbit-init-rfwsd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 e80c39c8-7dc3-4220-a933-cd908606b86a default }" containerID=617dbfc5926ec6ad6ddb42e0e046f9098e84dc3fd4e12abca3fca3fbbc8749a1 datapathConfiguration="&{false false false false false }" interface=lxc47530c97ebd6 k8sPodName=openstack/cinder-ks-service-dqm2r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=617dbfc592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/cinder-ks-service-dqm2r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=617dbfc592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=05872bbf-1bc1-4a02-a5b8-48114eae2101,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=05872bbf-1bc1-4a02-a5b8-48114eae2101,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/cinder-ks-service-dqm2r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=05872bbf-1bc1-4a02-a5b8-48114eae2101;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=05872bbf-1bc1-4a02-a5b8-48114eae2101;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=617dbfc592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 identity=54483 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=05872bbf-1bc1-4a02-a5b8-48114eae2101,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=05872bbf-1bc1-4a02-a5b8-48114eae2101,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/cinder-ks-service-dqm2r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=617dbfc592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 identity=54483 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/cinder-ks-service-dqm2r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=617dbfc592 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=659 identity=54483 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/cinder-ks-service-dqm2r subsys=endpoint level=info msg="Successful endpoint creation" containerID=617dbfc592 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=659 identity=54483 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/cinder-ks-service-dqm2r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=617dbfc592 endpointID=659 k8sNamespace=openstack k8sPodName=cinder-ks-service-dqm2r subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=05872bbf-1bc1-4a02-a5b8-48114eae2101 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=05872bbf-1bc1-4a02-a5b8-48114eae2101 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=617dbfc592 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=659 identity=54483 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/cinder-ks-service-dqm2r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 e8cfd312-c63d-4754-abbb-402a98de7d54 default }" containerID=036e955337cf81257e8f7a32bc4934b295c9603b72713114bb00614a2b623cfa datapathConfiguration="&{false false false false false }" interface=lxcdac1a1dc596a k8sPodName=openstack/cinder-ks-endpoints-624c6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=036e955337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-624c6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=036e955337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b9e30945-9e89-4e30-9655-da0ce9dc2218,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b9e30945-9e89-4e30-9655-da0ce9dc2218,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-624c6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=036e955337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-624c6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=b9e30945-9e89-4e30-9655-da0ce9dc2218;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b9e30945-9e89-4e30-9655-da0ce9dc2218;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=036e955337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=52266 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b9e30945-9e89-4e30-9655-da0ce9dc2218,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b9e30945-9e89-4e30-9655-da0ce9dc2218,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-624c6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=036e955337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=52266 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-624c6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=036e955337 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=89 identity=52266 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-624c6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=036e955337 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=89 identity=52266 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-624c6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=036e955337 endpointID=89 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-624c6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=b9e30945-9e89-4e30-9655-da0ce9dc2218 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b9e30945-9e89-4e30-9655-da0ce9dc2218 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=036e955337 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=89 identity=52266 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-ks-endpoints-624c6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 126851eb-4103-46e5-9190-6291704bbedb default }" containerID=8a60bd91396c305b267b51616199a78145df3c7f004a02e1b0ef5881c7c49a1b datapathConfiguration="&{false false false false false }" interface=lxc82c4f4d5b231 k8sPodName=openstack/cinder-ks-user-7ps22 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a60bd9139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=259 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/cinder-ks-user-7ps22 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a60bd9139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=259 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=34ba9447-8a21-4177-b6f5-2fc7d9e0e1b8,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=34ba9447-8a21-4177-b6f5-2fc7d9e0e1b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/cinder-ks-user-7ps22 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=34ba9447-8a21-4177-b6f5-2fc7d9e0e1b8;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=34ba9447-8a21-4177-b6f5-2fc7d9e0e1b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8a60bd9139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=259 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=openstack/cinder-ks-user-7ps22 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8a60bd9139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=259 identity=18099 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=34ba9447-8a21-4177-b6f5-2fc7d9e0e1b8,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=34ba9447-8a21-4177-b6f5-2fc7d9e0e1b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/cinder-ks-user-7ps22 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a60bd9139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=259 identity=18099 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/cinder-ks-user-7ps22 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a60bd9139 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=259 identity=18099 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/cinder-ks-user-7ps22 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a60bd9139 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=259 identity=18099 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/cinder-ks-user-7ps22 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8a60bd9139 endpointID=259 k8sNamespace=openstack k8sPodName=cinder-ks-user-7ps22 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=34ba9447-8a21-4177-b6f5-2fc7d9e0e1b8 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=34ba9447-8a21-4177-b6f5-2fc7d9e0e1b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8a60bd9139 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=259 identity=18099 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/cinder-ks-user-7ps22 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 115157d9-7a63-4e3f-b55f-b2a88107efa1 default }" containerID=e739ec1a505a10ef30d340cdf7ee965e9288fc36678d65aa12f74f1412cefe16 datapathConfiguration="&{false false false false false }" interface=lxc76e71493f8e1 k8sPodName=openstack/cinder-backup-storage-init-qp6mv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e739ec1a50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-backup-storage-init-qp6mv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e739ec1a50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d49496d6-70a9-4cdd-a347-410f17d1b002,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=d49496d6-70a9-4cdd-a347-410f17d1b002,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-backup-storage-init-qp6mv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d49496d6-70a9-4cdd-a347-410f17d1b002;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=d49496d6-70a9-4cdd-a347-410f17d1b002;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e739ec1a50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identity=19689 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d49496d6-70a9-4cdd-a347-410f17d1b002,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=d49496d6-70a9-4cdd-a347-410f17d1b002,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-backup-storage-init-qp6mv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e739ec1a50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identity=19689 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-backup-storage-init-qp6mv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e739ec1a50 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3690 identity=19689 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-backup-storage-init-qp6mv subsys=endpoint level=info msg="Successful endpoint creation" containerID=e739ec1a50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3690 identity=19689 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-backup-storage-init-qp6mv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e739ec1a50 endpointID=3690 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-qp6mv subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d49496d6-70a9-4cdd-a347-410f17d1b002 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=d49496d6-70a9-4cdd-a347-410f17d1b002 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e739ec1a50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3690 identity=19689 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/cinder-backup-storage-init-qp6mv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 264e25ec-380e-4eba-9028-4bdc553edba7 default }" containerID=d2d59284fb97b8bc6376c490f88cd339fac9afdc60affaf429d518ffca2fa4be datapathConfiguration="&{false false false false false }" interface=lxc16b51ece1d41 k8sPodName=openstack/cinder-create-internal-tenant-spsv5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2d59284fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-spsv5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2d59284fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8d24557c-bbfa-4262-950c-de395be806ef,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=8d24557c-bbfa-4262-950c-de395be806ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-spsv5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8d24557c-bbfa-4262-950c-de395be806ef;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=8d24557c-bbfa-4262-950c-de395be806ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2d59284fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 identity=939 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8d24557c-bbfa-4262-950c-de395be806ef,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=8d24557c-bbfa-4262-950c-de395be806ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-spsv5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2d59284fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 identity=939 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-spsv5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d2d59284fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=915 identity=939 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-spsv5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2d59284fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=915 identity=939 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-spsv5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d2d59284fb endpointID=915 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-spsv5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8d24557c-bbfa-4262-950c-de395be806ef k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=8d24557c-bbfa-4262-950c-de395be806ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d2d59284fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=915 identity=939 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-spsv5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 94b981fb-5111-449d-9c2c-f6ca4c1d8a69 default }" containerID=fda25ca1cc5bc02b2d8332afc03bd52e315d99fc0d6f3bc4850bcdd8d3a9b406 datapathConfiguration="&{false false false false false }" interface=lxcde2754ce0afb k8sPodName=openstack/cinder-storage-init-gzwrz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fda25ca1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-storage-init-gzwrz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fda25ca1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=40846d29-4f2c-4692-baea-68edc53346a4,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=40846d29-4f2c-4692-baea-68edc53346a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-storage-init-gzwrz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=40846d29-4f2c-4692-baea-68edc53346a4;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=40846d29-4f2c-4692-baea-68edc53346a4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fda25ca1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=52953 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=40846d29-4f2c-4692-baea-68edc53346a4,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=40846d29-4f2c-4692-baea-68edc53346a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-storage-init-gzwrz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fda25ca1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=52953 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-storage-init-gzwrz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fda25ca1cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=15 identity=52953 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-storage-init-gzwrz subsys=endpoint level=info msg="Successful endpoint creation" containerID=fda25ca1cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=15 identity=52953 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-storage-init-gzwrz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fda25ca1cc endpointID=15 k8sNamespace=openstack k8sPodName=cinder-storage-init-gzwrz subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=40846d29-4f2c-4692-baea-68edc53346a4 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=40846d29-4f2c-4692-baea-68edc53346a4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=fda25ca1cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=15 identity=52953 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-storage-init-gzwrz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 fc5ca62a-0e4d-4003-9448-489cfcc7ba4d default }" containerID=79e00a7a6a68bcdf583542a8061cb66786886de0f99607895a6edf970e07fd1a datapathConfiguration="&{false false false false false }" interface=lxc4db74b141802 k8sPodName=openstack/cinder-bootstrap-rvnnl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79e00a7a6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/cinder-bootstrap-rvnnl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79e00a7a6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cac57c64-02d6-4312-b43c-20a33d8e9d99,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=cac57c64-02d6-4312-b43c-20a33d8e9d99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/cinder-bootstrap-rvnnl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=cac57c64-02d6-4312-b43c-20a33d8e9d99;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=cac57c64-02d6-4312-b43c-20a33d8e9d99;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79e00a7a6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identity=56699 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cac57c64-02d6-4312-b43c-20a33d8e9d99,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=cac57c64-02d6-4312-b43c-20a33d8e9d99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/cinder-bootstrap-rvnnl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=79e00a7a6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identity=56699 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/cinder-bootstrap-rvnnl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79e00a7a6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=306 identity=56699 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/cinder-bootstrap-rvnnl subsys=endpoint level=info msg="Successful endpoint creation" containerID=79e00a7a6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=306 identity=56699 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/cinder-bootstrap-rvnnl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.53 a281773d-1fc7-4e26-af08-cb6aea3fa812 default }" containerID=099fc1c530968505c2e7986d3ad8c98d436db3effd7083fbac913a21091b5f5a datapathConfiguration="&{false false false false false }" interface=lxcbab292d2d137 k8sPodName=openstack/cinder-volume-6d8bc9f8b8-q87rb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=099fc1c530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2490 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-volume-6d8bc9f8b8-q87rb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=099fc1c530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2490 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-volume-6d8bc9f8b8-q87rb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=099fc1c530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2490 identity=9003 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-volume-6d8bc9f8b8-q87rb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=099fc1c530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2490 identity=9003 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-volume-6d8bc9f8b8-q87rb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 675817f6-efce-4a27-b7d1-2b38fe586de1 default }" containerID=3190944dd2fc345210f85fa9f7ff38ee0e15d24bc02f417cf74714c8dbba97f4 datapathConfiguration="&{false false false false false }" interface=lxccc1461209fd6 k8sPodName=openstack/cinder-backup-d6744cc85-d6nsd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3190944dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-backup-d6744cc85-d6nsd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3190944dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-backup-d6744cc85-d6nsd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3190944dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 identity=24281 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-backup-d6744cc85-d6nsd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3190944dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 identity=24281 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-backup-d6744cc85-d6nsd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=099fc1c530 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2490 identity=9003 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-volume-6d8bc9f8b8-q87rb subsys=endpoint level=info msg="Successful endpoint creation" containerID=099fc1c530 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2490 identity=9003 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-volume-6d8bc9f8b8-q87rb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3190944dd2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3164 identity=24281 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-backup-d6744cc85-d6nsd subsys=endpoint level=info msg="Successful endpoint creation" containerID=3190944dd2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3164 identity=24281 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-backup-d6744cc85-d6nsd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=79e00a7a6a endpointID=306 k8sNamespace=openstack k8sPodName=cinder-bootstrap-rvnnl subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=cac57c64-02d6-4312-b43c-20a33d8e9d99 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=cac57c64-02d6-4312-b43c-20a33d8e9d99 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=79e00a7a6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=306 identity=56699 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/cinder-bootstrap-rvnnl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 881c0a56-b0ed-4e43-9148-ba608720e26b default }" containerID=d3ac804c5c57a52a13d434c9d497795b4092af7c9ab7d4b4b842fb83ffc33004 datapathConfiguration="&{false false false false false }" interface=lxce733c36c6e4a k8sPodName=openstack/placement-api-856698697d-8qgw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3ac804c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1970 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/placement-api-856698697d-8qgw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3ac804c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1970 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/placement-api-856698697d-8qgw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3ac804c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1970 identity=15863 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/placement-api-856698697d-8qgw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3ac804c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1970 identity=15863 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/placement-api-856698697d-8qgw2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3ac804c5c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1970 identity=15863 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/placement-api-856698697d-8qgw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3ac804c5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1970 identity=15863 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/placement-api-856698697d-8qgw2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.67 9e61d59e-c363-4337-96d5-21d4acb454dd default }" containerID=7fb88eb56403c2f0511d9b1c7941d872e774db845ebd321a4f7376cff3bb3c5e datapathConfiguration="&{false false false false false }" interface=lxc152692f36bea k8sPodName=openstack/placement-db-init-fpj24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fb88eb564 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/placement-db-init-fpj24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fb88eb564 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=4dd41e6f-131d-41ed-b170-2df67ea4cf5a,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=4dd41e6f-131d-41ed-b170-2df67ea4cf5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/placement-db-init-fpj24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=4dd41e6f-131d-41ed-b170-2df67ea4cf5a;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=4dd41e6f-131d-41ed-b170-2df67ea4cf5a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7fb88eb564 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identity=23499 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=4dd41e6f-131d-41ed-b170-2df67ea4cf5a,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=4dd41e6f-131d-41ed-b170-2df67ea4cf5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/placement-db-init-fpj24 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fb88eb564 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identity=23499 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/placement-db-init-fpj24 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7fb88eb564 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=584 identity=23499 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/placement-db-init-fpj24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fb88eb564 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=584 identity=23499 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/placement-db-init-fpj24 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7fb88eb564 endpointID=584 k8sNamespace=openstack k8sPodName=placement-db-init-fpj24 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=4dd41e6f-131d-41ed-b170-2df67ea4cf5a k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=4dd41e6f-131d-41ed-b170-2df67ea4cf5a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=7fb88eb564 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=584 identity=23499 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/placement-db-init-fpj24 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 d9fac65c-b21c-4e47-8ab1-a959a0cc260c default }" containerID=87d24c522f3e34ad6849410e5185faab3a78cb2a6f01cfdf6da20d28c1fc1b9c datapathConfiguration="&{false false false false false }" interface=lxc1e2b78738f0a k8sPodName=openstack/placement-db-sync-v88hd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87d24c522f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/placement-db-sync-v88hd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87d24c522f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=5a443a3d-74fa-4b3d-b3ec-19bb688f12e8,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=5a443a3d-74fa-4b3d-b3ec-19bb688f12e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/placement-db-sync-v88hd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=5a443a3d-74fa-4b3d-b3ec-19bb688f12e8;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=5a443a3d-74fa-4b3d-b3ec-19bb688f12e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=87d24c522f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identity=31200 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=5a443a3d-74fa-4b3d-b3ec-19bb688f12e8,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=5a443a3d-74fa-4b3d-b3ec-19bb688f12e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/placement-db-sync-v88hd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87d24c522f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identity=31200 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/placement-db-sync-v88hd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87d24c522f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=372 identity=31200 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/placement-db-sync-v88hd subsys=endpoint level=info msg="Successful endpoint creation" containerID=87d24c522f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=372 identity=31200 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/placement-db-sync-v88hd subsys=daemon level=info msg="Delete endpoint request" containerID=87d24c522f endpointID=372 k8sNamespace=openstack k8sPodName=placement-db-sync-v88hd subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=5a443a3d-74fa-4b3d-b3ec-19bb688f12e8 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=5a443a3d-74fa-4b3d-b3ec-19bb688f12e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=87d24c522f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=372 identity=31200 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/placement-db-sync-v88hd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 66185281-e077-4b76-87d8-30aa79403e1c default }" containerID=63a968e57275c26245097f2de45602cbcaf8b85e97e0c1cd71f73760ba4daa8b datapathConfiguration="&{false false false false false }" interface=lxc82d90b98772f k8sPodName=openstack/placement-ks-service-5958q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63a968e572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-5958q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63a968e572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=da95a1f4-593d-4524-8fcf-6ed9760dad73,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=da95a1f4-593d-4524-8fcf-6ed9760dad73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-5958q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=da95a1f4-593d-4524-8fcf-6ed9760dad73;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=da95a1f4-593d-4524-8fcf-6ed9760dad73;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63a968e572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identity=4739 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=da95a1f4-593d-4524-8fcf-6ed9760dad73,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=da95a1f4-593d-4524-8fcf-6ed9760dad73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-5958q oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=63a968e572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identity=4739 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-5958q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63a968e572 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2321 identity=4739 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-5958q subsys=endpoint level=info msg="Successful endpoint creation" containerID=63a968e572 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2321 identity=4739 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-5958q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=63a968e572 endpointID=2321 k8sNamespace=openstack k8sPodName=placement-ks-service-5958q subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=da95a1f4-593d-4524-8fcf-6ed9760dad73 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=da95a1f4-593d-4524-8fcf-6ed9760dad73 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=63a968e572 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2321 identity=4739 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-5958q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 dc4500c4-a586-47d2-9dba-a9c925f754cd default }" containerID=746b3603583b7c5666f9e7a987d0f14e73175353b41c035bdb4102c22117d6a8 datapathConfiguration="&{false false false false false }" interface=lxc11afcbe79269 k8sPodName=openstack/placement-ks-user-cmwx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=746b360358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-cmwx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=746b360358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=b5a5c53b-e765-4f03-aa6f-a072b689a8fb,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=b5a5c53b-e765-4f03-aa6f-a072b689a8fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-cmwx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=b5a5c53b-e765-4f03-aa6f-a072b689a8fb;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=b5a5c53b-e765-4f03-aa6f-a072b689a8fb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=746b360358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identity=31812 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=b5a5c53b-e765-4f03-aa6f-a072b689a8fb,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=b5a5c53b-e765-4f03-aa6f-a072b689a8fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-cmwx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=746b360358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identity=31812 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-cmwx9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=746b360358 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=456 identity=31812 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-cmwx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=746b360358 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=456 identity=31812 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-cmwx9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=746b360358 endpointID=456 k8sNamespace=openstack k8sPodName=placement-ks-user-cmwx9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=b5a5c53b-e765-4f03-aa6f-a072b689a8fb k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=b5a5c53b-e765-4f03-aa6f-a072b689a8fb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=746b360358 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=456 identity=31812 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/placement-ks-user-cmwx9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 0df60ce3-b950-4b23-87b5-ae0727230817 default }" containerID=de8710ecf2cf9666df9353241c833b1ba971a618e96d8a163ae85cf0549a252b datapathConfiguration="&{false false false false false }" interface=lxcd52876449cd5 k8sPodName=openstack/placement-ks-endpoints-xqcf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de8710ecf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-ks-endpoints-xqcf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de8710ecf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=cbb25fee-e8d4-45d3-8f87-a1ef186ebf2c,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cbb25fee-e8d4-45d3-8f87-a1ef186ebf2c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-ks-endpoints-xqcf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=de8710ecf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-ks-endpoints-xqcf7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=cbb25fee-e8d4-45d3-8f87-a1ef186ebf2c;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=cbb25fee-e8d4-45d3-8f87-a1ef186ebf2c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de8710ecf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 identity=20805 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=cbb25fee-e8d4-45d3-8f87-a1ef186ebf2c,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cbb25fee-e8d4-45d3-8f87-a1ef186ebf2c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-ks-endpoints-xqcf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de8710ecf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 identity=20805 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-ks-endpoints-xqcf7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de8710ecf2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1961 identity=20805 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-ks-endpoints-xqcf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de8710ecf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1961 identity=20805 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-ks-endpoints-xqcf7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de8710ecf2 endpointID=1961 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-xqcf7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=cbb25fee-e8d4-45d3-8f87-a1ef186ebf2c k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=cbb25fee-e8d4-45d3-8f87-a1ef186ebf2c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=de8710ecf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1961 identity=20805 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-ks-endpoints-xqcf7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 7393e56a-a4b3-4ce3-a2e4-4a03603c84f3 default }" containerID=254fcf5b50ae713b97344a04dead1cbce0826c30d24ffaae522f95e46239acc2 datapathConfiguration="&{false false false false false }" interface=lxc4dccd165287b k8sPodName=openstack/ovn-northd-fc978744-qdrd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=254fcf5b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3604 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/ovn-northd-fc978744-qdrd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=254fcf5b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3604 identityLabels="k8s:application=ovn,k8s:component=ovn-northd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/ovn-northd-fc978744-qdrd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:component=ovn-northd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=254fcf5b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3604 identity=55093 identityLabels="k8s:application=ovn,k8s:component=ovn-northd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/ovn-northd-fc978744-qdrd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=254fcf5b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3604 identity=55093 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/ovn-northd-fc978744-qdrd2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.146 9e279a9b-239e-45eb-a378-91b39d9c67c7 default }" containerID=514e75add8f299a6a654b63be7b62b75749ff04f5e749b4dc42e49bd31b140c8 datapathConfiguration="&{false false false false false }" interface=lxcd2ea940d2079 k8sPodName=local-path-storage/helper-pod-create-pvc-e48cf672-e06e-44f0-b463-3ed96212d4c5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=514e75add8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e48cf672-e06e-44f0-b463-3ed96212d4c5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=514e75add8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e48cf672-e06e-44f0-b463-3ed96212d4c5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=514e75add8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identity=20878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e48cf672-e06e-44f0-b463-3ed96212d4c5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=514e75add8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identity=20878 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e48cf672-e06e-44f0-b463-3ed96212d4c5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=254fcf5b50 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3604 identity=55093 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/ovn-northd-fc978744-qdrd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=254fcf5b50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3604 identity=55093 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/ovn-northd-fc978744-qdrd2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.100 1e555c58-f9fb-4f2e-a6a8-1c880fcf4ae5 default }" containerID=fc9d84fce507f1d846a2a340128d8f6e1a397eb3c400ae38a31b82cd4a99b487 datapathConfiguration="&{false false false false false }" interface=lxc5315698f8756 k8sPodName=local-path-storage/helper-pod-create-pvc-2ef02326-f7c7-451e-a55e-8bcf70a3dcea labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc9d84fce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ef02326-f7c7-451e-a55e-8bcf70a3dcea subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc9d84fce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ef02326-f7c7-451e-a55e-8bcf70a3dcea subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fc9d84fce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 identity=20878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ef02326-f7c7-451e-a55e-8bcf70a3dcea oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc9d84fce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 identity=20878 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ef02326-f7c7-451e-a55e-8bcf70a3dcea subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=514e75add8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1263 identity=20878 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e48cf672-e06e-44f0-b463-3ed96212d4c5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=514e75add8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1263 identity=20878 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e48cf672-e06e-44f0-b463-3ed96212d4c5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fc9d84fce5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3131 identity=20878 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ef02326-f7c7-451e-a55e-8bcf70a3dcea subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc9d84fce5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3131 identity=20878 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ef02326-f7c7-451e-a55e-8bcf70a3dcea subsys=daemon level=info msg="Delete endpoint request" containerID=fc9d84fce5 endpointID=3131 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2ef02326-f7c7-451e-a55e-8bcf70a3dcea subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=514e75add8 endpointID=1263 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e48cf672-e06e-44f0-b463-3ed96212d4c5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fc9d84fce5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3131 identity=20878 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ef02326-f7c7-451e-a55e-8bcf70a3dcea subsys=endpoint level=info msg="Removed endpoint" containerID=514e75add8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1263 identity=20878 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e48cf672-e06e-44f0-b463-3ed96212d4c5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 5c7d8a17-643e-47f0-b6bf-50fb66900185 default }" containerID=01850531cfa70080db096e4c2b76beb37fa0c00a399777ee5cc99a9f0820f78e datapathConfiguration="&{false false false false false }" interface=lxc36a42e7aee4d k8sPodName=openstack/ovn-ovsdb-sb-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01850531cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01850531cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-sb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.141 706a88e5-73b1-416f-9cd6-70bf226ac0c2 default }" containerID=841e441c3b467043c4b9d655a7b9966280cefebfc894595e668a296b486a6a6e datapathConfiguration="&{false false false false false }" interface=lxce241a0f43032 k8sPodName=openstack/ovn-ovsdb-nb-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=841e441c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=841e441c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-nb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:apps.kubernetes.io/pod-index=0;k8s:component=ovn-ovsdb-sb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01850531cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identity=10734 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-sb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01850531cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identity=10734 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=841e441c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:apps.kubernetes.io/pod-index=0;k8s:component=ovn-ovsdb-nb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=841e441c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identity=19541 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-nb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=841e441c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identity=19541 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01850531cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3634 identity=10734 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=01850531cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3634 identity=10734 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=841e441c3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2198 identity=19541 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=841e441c3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2198 identity=19541 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 853e0251-3bb4-4072-95b9-383119086266 default }" containerID=8661aaed7c6a59d9442d81ef0a395c37d7b8a3f8864a81f5ef71832939f02559 datapathConfiguration="&{false false false false false }" interface=lxcbb814703e518 k8sPodName=local-path-storage/helper-pod-create-pvc-3c5b7ec6-98f0-4a98-ba9c-817d7bd21928 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8661aaed7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3c5b7ec6-98f0-4a98-ba9c-817d7bd21928 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8661aaed7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3c5b7ec6-98f0-4a98-ba9c-817d7bd21928 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8661aaed7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identity=20878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3c5b7ec6-98f0-4a98-ba9c-817d7bd21928 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8661aaed7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identity=20878 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3c5b7ec6-98f0-4a98-ba9c-817d7bd21928 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8661aaed7c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2232 identity=20878 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3c5b7ec6-98f0-4a98-ba9c-817d7bd21928 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8661aaed7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2232 identity=20878 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3c5b7ec6-98f0-4a98-ba9c-817d7bd21928 subsys=daemon level=info msg="Delete endpoint request" containerID=8661aaed7c endpointID=2232 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3c5b7ec6-98f0-4a98-ba9c-817d7bd21928 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8661aaed7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2232 identity=20878 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3c5b7ec6-98f0-4a98-ba9c-817d7bd21928 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 362279eb-32bc-4a08-8492-5d3c9e558078 default }" containerID=2ef6a1aa663ae1da0ddbd66338998b5024c1475c6652ad3b5a96cf3d0d47cfae datapathConfiguration="&{false false false false false }" interface=lxcc869501da6dd k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ef6a1aa66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3775 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ef6a1aa66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3775 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ef6a1aa66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3775 identity=1759 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ef6a1aa66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3775 identity=1759 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2ef6a1aa66 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3775 identity=1759 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ef6a1aa66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3775 identity=1759 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 a8096e62-e6f2-48cd-b1f4-14f7b6f08161 default }" containerID=2858e0679eb182cb2f38221fd2b7c5dcd5d76e2ae3fccfef03805d2c81849034 datapathConfiguration="&{false false false false false }" interface=lxc11c456a6c419 k8sPodName=openstack/nova-scheduler-75b88fb687-w5gvp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2858e0679e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-scheduler-75b88fb687-w5gvp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2858e0679e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-scheduler-75b88fb687-w5gvp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2858e0679e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=62404 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-scheduler-75b88fb687-w5gvp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2858e0679e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=62404 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-scheduler-75b88fb687-w5gvp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 d22b6636-6357-46a1-9065-a6622a52061a default }" containerID=86dfbf9c156f5afd184ee26ffd09d0d07d75ea8fa1262b5ec50dd221b9e51233 datapathConfiguration="&{false false false false false }" interface=lxcb6e653f59f8d k8sPodName=openstack/nova-api-metadata-7d948574c5-ddxm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86dfbf9c15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1709 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/nova-api-metadata-7d948574c5-ddxm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86dfbf9c15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1709 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/nova-api-metadata-7d948574c5-ddxm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86dfbf9c15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1709 identity=18084 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/nova-api-metadata-7d948574c5-ddxm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86dfbf9c15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1709 identity=18084 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/nova-api-metadata-7d948574c5-ddxm8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 e7d32067-abcc-46ca-be0d-97cbfb288bf9 default }" containerID=7bb2542d52f05c29091134bf28aa635a86025c5abc58493929201881471e448a datapathConfiguration="&{false false false false false }" interface=lxc775f30d57e8f k8sPodName=openstack/nova-conductor-86448c5-7n68b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7bb2542d52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-conductor-86448c5-7n68b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7bb2542d52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-conductor-86448c5-7n68b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7bb2542d52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identity=52446 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-conductor-86448c5-7n68b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7bb2542d52 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1365 identity=52446 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-conductor-86448c5-7n68b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 8aae8e57-d997-4d90-98bb-cf33ff6c488f default }" containerID=b291b4dacb6348a33341c086556a75eec191286b43349e8cecb41af28d8ea4a8 datapathConfiguration="&{false false false false false }" interface=lxcc305c6c8b0c1 k8sPodName=openstack/nova-cell-setup-ctjql labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b291b4dacb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/nova-cell-setup-ctjql subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b291b4dacb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e7caeb59-1a15-4bcc-a9f1-dde9b9c66cb6,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=e7caeb59-1a15-4bcc-a9f1-dde9b9c66cb6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/nova-cell-setup-ctjql subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=e7caeb59-1a15-4bcc-a9f1-dde9b9c66cb6;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=e7caeb59-1a15-4bcc-a9f1-dde9b9c66cb6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b291b4dacb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identity=32975 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e7caeb59-1a15-4bcc-a9f1-dde9b9c66cb6,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=e7caeb59-1a15-4bcc-a9f1-dde9b9c66cb6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/nova-cell-setup-ctjql oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b291b4dacb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identity=32975 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/nova-cell-setup-ctjql subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2858e0679e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2482 identity=62404 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-scheduler-75b88fb687-w5gvp subsys=endpoint level=info msg="Successful endpoint creation" containerID=2858e0679e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2482 identity=62404 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-scheduler-75b88fb687-w5gvp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.189 f2063b5a-b202-48a7-99d3-de3c06fcb76b default }" containerID=a5f847a327affda5a6da97aa964667934f226facf5d39cd5c88de3556afa4da2 datapathConfiguration="&{false false false false false }" interface=lxcfe3fce196e61 k8sPodName=openstack/nova-bootstrap-dpqqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5f847a327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-bootstrap-dpqqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5f847a327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3e91a679-385e-46fc-9d6e-09271a1816f2,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=3e91a679-385e-46fc-9d6e-09271a1816f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-bootstrap-dpqqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.16 a3bdf8ea-c248-41b4-a620-ec61e9eec43a default }" containerID=7c751ada2d3f77066ac070ccfa7e99274a2da3f1b114e24ffa9826b27618a74d datapathConfiguration="&{false false false false false }" interface=lxcd4c6270601ca k8sPodName=openstack/nova-api-osapi-7b9d686fb5-4m5j9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c751ada2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1439 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-api-osapi-7b9d686fb5-4m5j9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c751ada2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1439 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-api-osapi-7b9d686fb5-4m5j9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86dfbf9c15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1709 identity=18084 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/nova-api-metadata-7d948574c5-ddxm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=86dfbf9c15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1709 identity=18084 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/nova-api-metadata-7d948574c5-ddxm8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.30 d2902b67-2bee-4263-bf57-3db35e427aeb default }" containerID=9134b55da95998529a0f0064f8c373f4ef84ce38177d2c48b91bfd467e06ce0f datapathConfiguration="&{false false false false false }" interface=lxcb50aa1ed4014 k8sPodName=openstack/nova-db-init-x7ctq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9134b55da9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/nova-db-init-x7ctq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9134b55da9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0aa4cbe8-6a11-43c4-af62-7f2fec249524,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=0aa4cbe8-6a11-43c4-af62-7f2fec249524,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/nova-db-init-x7ctq subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=3e91a679-385e-46fc-9d6e-09271a1816f2;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=3e91a679-385e-46fc-9d6e-09271a1816f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=a5f847a327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=28893 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3e91a679-385e-46fc-9d6e-09271a1816f2,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=3e91a679-385e-46fc-9d6e-09271a1816f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-bootstrap-dpqqb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5f847a327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=28893 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-bootstrap-dpqqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7bb2542d52 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1365 identity=52446 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-conductor-86448c5-7n68b subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bb2542d52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1365 identity=52446 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/nova-conductor-86448c5-7n68b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b291b4dacb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=895 identity=32975 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/nova-cell-setup-ctjql subsys=endpoint level=info msg="Successful endpoint creation" containerID=b291b4dacb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=895 identity=32975 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/nova-cell-setup-ctjql subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c751ada2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1439 identity=20293 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-api-osapi-7b9d686fb5-4m5j9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c751ada2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1439 identity=20293 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-api-osapi-7b9d686fb5-4m5j9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=a5f847a327 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2417 identity=28893 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-bootstrap-dpqqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5f847a327 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2417 identity=28893 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-bootstrap-dpqqb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9134b55da9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.30 ipv6= k8sPodName=openstack/nova-db-init-x7ctq line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c751ada2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1439 identity=20293 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-api-osapi-7b9d686fb5-4m5j9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c751ada2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1439 identity=20293 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/nova-api-osapi-7b9d686fb5-4m5j9 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=0aa4cbe8-6a11-43c4-af62-7f2fec249524;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=0aa4cbe8-6a11-43c4-af62-7f2fec249524;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9134b55da9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 identity=17265 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0aa4cbe8-6a11-43c4-af62-7f2fec249524,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=0aa4cbe8-6a11-43c4-af62-7f2fec249524,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/nova-db-init-x7ctq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9134b55da9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 identity=17265 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/nova-db-init-x7ctq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9134b55da9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2504 identity=17265 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/nova-db-init-x7ctq subsys=endpoint level=info msg="Successful endpoint creation" containerID=9134b55da9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2504 identity=17265 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/nova-db-init-x7ctq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.220 0ff6fa0d-31dd-4049-859d-01a91d43cda7 default }" containerID=5e4c00b32c1d54f92ad65f3b55df510fdfea1e07114bca1387fd39514b2eef92 datapathConfiguration="&{false false false false false }" interface=lxc91460c73c428 k8sPodName=openstack/nova-novncproxy-5df69f6686-9chnz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e4c00b32c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/nova-novncproxy-5df69f6686-9chnz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e4c00b32c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/nova-novncproxy-5df69f6686-9chnz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e4c00b32c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identity=48210 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/nova-novncproxy-5df69f6686-9chnz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e4c00b32c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identity=48210 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/nova-novncproxy-5df69f6686-9chnz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e4c00b32c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1457 identity=48210 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/nova-novncproxy-5df69f6686-9chnz subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e4c00b32c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1457 identity=48210 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/nova-novncproxy-5df69f6686-9chnz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9134b55da9 endpointID=2504 k8sNamespace=openstack k8sPodName=nova-db-init-x7ctq subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=0aa4cbe8-6a11-43c4-af62-7f2fec249524 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=0aa4cbe8-6a11-43c4-af62-7f2fec249524 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=9134b55da9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2504 identity=17265 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/nova-db-init-x7ctq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 be84e4c1-d14a-4930-aaf5-76444032cc18 default }" containerID=bec5fc1d6873b9ed323c54edf5618063d677c5d05217e9ae386521a83da6b5df datapathConfiguration="&{false false false false false }" interface=lxcc640d9a14b78 k8sPodName=openstack/nova-db-sync-vld7g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bec5fc1d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/nova-db-sync-vld7g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bec5fc1d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b448e248-a2bd-41ca-973a-018fff09758d,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=b448e248-a2bd-41ca-973a-018fff09758d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/nova-db-sync-vld7g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=b448e248-a2bd-41ca-973a-018fff09758d;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=b448e248-a2bd-41ca-973a-018fff09758d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bec5fc1d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identity=10540 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b448e248-a2bd-41ca-973a-018fff09758d,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=b448e248-a2bd-41ca-973a-018fff09758d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/nova-db-sync-vld7g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bec5fc1d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identity=10540 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/nova-db-sync-vld7g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bec5fc1d68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=556 identity=10540 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/nova-db-sync-vld7g subsys=endpoint level=info msg="Successful endpoint creation" containerID=bec5fc1d68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=556 identity=10540 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/nova-db-sync-vld7g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bec5fc1d68 endpointID=556 k8sNamespace=openstack k8sPodName=nova-db-sync-vld7g subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=b448e248-a2bd-41ca-973a-018fff09758d k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=b448e248-a2bd-41ca-973a-018fff09758d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=bec5fc1d68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=556 identity=10540 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/nova-db-sync-vld7g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 3972d3bd-101b-4d86-aa11-b9d4bc114cda default }" containerID=25c3329bdc38ce618f81d809749d012afd900295019f678a782be106aba79bc9 datapathConfiguration="&{false false false false false }" interface=lxced45d1e06abc k8sPodName=openstack/nova-rabbit-init-q62gq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25c3329bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2108 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/nova-rabbit-init-q62gq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25c3329bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2108 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=bfcab6ff-7438-465c-bf83-ff6b54be34f2,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bfcab6ff-7438-465c-bf83-ff6b54be34f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/nova-rabbit-init-q62gq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=bfcab6ff-7438-465c-bf83-ff6b54be34f2;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=bfcab6ff-7438-465c-bf83-ff6b54be34f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25c3329bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2108 identity=33843 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=bfcab6ff-7438-465c-bf83-ff6b54be34f2,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bfcab6ff-7438-465c-bf83-ff6b54be34f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/nova-rabbit-init-q62gq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25c3329bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2108 identity=33843 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/nova-rabbit-init-q62gq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=25c3329bdc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2108 identity=33843 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/nova-rabbit-init-q62gq subsys=endpoint level=info msg="Successful endpoint creation" containerID=25c3329bdc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2108 identity=33843 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/nova-rabbit-init-q62gq subsys=daemon level=info msg="Delete endpoint request" containerID=25c3329bdc endpointID=2108 k8sNamespace=openstack k8sPodName=nova-rabbit-init-q62gq subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=bfcab6ff-7438-465c-bf83-ff6b54be34f2 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=bfcab6ff-7438-465c-bf83-ff6b54be34f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=25c3329bdc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2108 identity=33843 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/nova-rabbit-init-q62gq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 c68fa414-1fee-4778-b0dc-e2208848af14 default }" containerID=7cd6f20df7a5c28590ba6eaa86cda893d9c50f8c23589374dfc76732276875f9 datapathConfiguration="&{false false false false false }" interface=lxcba38916f73bc k8sPodName=openstack/nova-ks-service-fb666 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7cd6f20df7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-ks-service-fb666 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7cd6f20df7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=8d787ac7-4784-4f14-a5d5-00ee098db2f7,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=8d787ac7-4784-4f14-a5d5-00ee098db2f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-ks-service-fb666 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=8d787ac7-4784-4f14-a5d5-00ee098db2f7;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=8d787ac7-4784-4f14-a5d5-00ee098db2f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7cd6f20df7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=16942 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=8d787ac7-4784-4f14-a5d5-00ee098db2f7,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=8d787ac7-4784-4f14-a5d5-00ee098db2f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-ks-service-fb666 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7cd6f20df7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=16942 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-ks-service-fb666 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7cd6f20df7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=212 identity=16942 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-ks-service-fb666 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7cd6f20df7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=212 identity=16942 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-ks-service-fb666 subsys=daemon level=info msg="Delete endpoint request" containerID=7cd6f20df7 endpointID=212 k8sNamespace=openstack k8sPodName=nova-ks-service-fb666 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=8d787ac7-4784-4f14-a5d5-00ee098db2f7 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=8d787ac7-4784-4f14-a5d5-00ee098db2f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=7cd6f20df7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=212 identity=16942 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/nova-ks-service-fb666 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 ec91debf-ab89-4b10-9b0f-f32d4cf086eb default }" containerID=20fea598bb0425814b3b6f773d7c0a6b0cb4e91e1f828b169b638460bab2ce75 datapathConfiguration="&{false false false false false }" interface=lxce3d14f59b97f k8sPodName=openstack/nova-ks-endpoints-w4ln7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20fea598bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-ks-endpoints-w4ln7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20fea598bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=18f3b078-9b57-4bbb-b888-eb82942c92b1,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=18f3b078-9b57-4bbb-b888-eb82942c92b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-ks-endpoints-w4ln7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=20fea598bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-ks-endpoints-w4ln7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=18f3b078-9b57-4bbb-b888-eb82942c92b1;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=18f3b078-9b57-4bbb-b888-eb82942c92b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20fea598bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=17033 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=18f3b078-9b57-4bbb-b888-eb82942c92b1,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=18f3b078-9b57-4bbb-b888-eb82942c92b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-ks-endpoints-w4ln7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20fea598bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=17033 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-ks-endpoints-w4ln7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20fea598bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=533 identity=17033 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-ks-endpoints-w4ln7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=20fea598bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=533 identity=17033 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-ks-endpoints-w4ln7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=20fea598bb endpointID=533 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-w4ln7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=18f3b078-9b57-4bbb-b888-eb82942c92b1 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=18f3b078-9b57-4bbb-b888-eb82942c92b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=20fea598bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=533 identity=17033 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-ks-endpoints-w4ln7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 bcb146e4-6622-4812-b6b8-42a316963237 default }" containerID=9d499e4bbbd38bc7a9a7da43e858d117085a2cf783aa44df3d4f34fdc913519e datapathConfiguration="&{false false false false false }" interface=lxc3ec4a0f885ea k8sPodName=openstack/nova-ks-user-pl4zp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d499e4bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-ks-user-pl4zp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d499e4bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=745234ac-944c-44ef-b7c2-b3cdfeafb273,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=745234ac-944c-44ef-b7c2-b3cdfeafb273,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-ks-user-pl4zp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=745234ac-944c-44ef-b7c2-b3cdfeafb273;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=745234ac-944c-44ef-b7c2-b3cdfeafb273;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d499e4bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=25773 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=745234ac-944c-44ef-b7c2-b3cdfeafb273,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=745234ac-944c-44ef-b7c2-b3cdfeafb273,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-ks-user-pl4zp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d499e4bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=25773 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-ks-user-pl4zp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9d499e4bbb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1433 identity=25773 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-ks-user-pl4zp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d499e4bbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1433 identity=25773 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-ks-user-pl4zp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9d499e4bbb endpointID=1433 k8sNamespace=openstack k8sPodName=nova-ks-user-pl4zp subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=745234ac-944c-44ef-b7c2-b3cdfeafb273 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=745234ac-944c-44ef-b7c2-b3cdfeafb273 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=9d499e4bbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1433 identity=25773 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/nova-ks-user-pl4zp subsys=endpoint level=info msg="Delete endpoint request" containerID=a5f847a327 endpointID=2417 k8sNamespace=openstack k8sPodName=nova-bootstrap-dpqqb subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=3e91a679-385e-46fc-9d6e-09271a1816f2 k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=3e91a679-385e-46fc-9d6e-09271a1816f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=a5f847a327 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2417 identity=28893 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-bootstrap-dpqqb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 ae9742bb-17f9-4195-aeec-931659b4e1e2 default }" containerID=69f609a73e3f61d6b9036f4402fcf1709b2a9aec6e5296e76808f78b9755d24b datapathConfiguration="&{false false false false false }" interface=lxcd32b4465f411 k8sPodName=local-path-storage/helper-pod-create-pvc-ab4ac259-e686-44f6-8d35-b40b419135b6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69f609a73e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab4ac259-e686-44f6-8d35-b40b419135b6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69f609a73e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab4ac259-e686-44f6-8d35-b40b419135b6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69f609a73e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identity=20878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab4ac259-e686-44f6-8d35-b40b419135b6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69f609a73e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identity=20878 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab4ac259-e686-44f6-8d35-b40b419135b6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69f609a73e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2443 identity=20878 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab4ac259-e686-44f6-8d35-b40b419135b6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=69f609a73e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2443 identity=20878 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab4ac259-e686-44f6-8d35-b40b419135b6 subsys=daemon level=info msg="Delete endpoint request" containerID=69f609a73e endpointID=2443 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ab4ac259-e686-44f6-8d35-b40b419135b6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=69f609a73e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2443 identity=20878 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab4ac259-e686-44f6-8d35-b40b419135b6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 0515c856-5e91-4f27-a2a3-1937f7e4e15d default }" containerID=5706382b1b56f8dfb725c3df4e8f253cc4ad1b14f2841b32429eaf845d247a09 datapathConfiguration="&{false false false false false }" interface=lxcb7587d3745b3 k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5706382b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2011 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5706382b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2011 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5706382b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2011 identity=37856 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5706382b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2011 identity=37856 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5706382b1b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2011 identity=37856 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5706382b1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2011 identity=37856 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.133 c5cb7ad7-d899-48f5-b8aa-8888729e1cbe default }" containerID=a9cecbe4521f1e97630d8820a8bf7bc06fd2ddc2f08eeec14923752171dd1ba7 datapathConfiguration="&{false false false false false }" interface=lxc9ec2bc903dcc k8sPodName=openstack/neutron-rpc-server-57f44dbbc-8422d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9cecbe452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/neutron-rpc-server-57f44dbbc-8422d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9cecbe452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/neutron-rpc-server-57f44dbbc-8422d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9cecbe452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identity=29012 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/neutron-rpc-server-57f44dbbc-8422d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9cecbe452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identity=29012 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/neutron-rpc-server-57f44dbbc-8422d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.251 b75730da-924c-4aef-a59e-cb331203db88 default }" containerID=7e4bf4aeb23fc4991f0f92dd4a7a33c0968b9ec1fc85cebac61f1d2f4a535e4d datapathConfiguration="&{false false false false false }" interface=lxc649140400fd9 k8sPodName=openstack/neutron-server-69ff694476-hcmkc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e4bf4aeb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4030 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-server-69ff694476-hcmkc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e4bf4aeb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4030 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-server-69ff694476-hcmkc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e4bf4aeb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4030 identity=6946 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-server-69ff694476-hcmkc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e4bf4aeb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4030 identity=6946 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-server-69ff694476-hcmkc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 8e89026a-14a8-4816-bd63-28fabec2e16e default }" containerID=1ddeeee85f0e1b17b14b1dacc351350439c351c23dc5a0ea1f63a32ffc5e146e datapathConfiguration="&{false false false false false }" interface=lxc558543892684 k8sPodName=openstack/neutron-db-init-lx5q5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ddeeee85f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-db-init-lx5q5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ddeeee85f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=5237c037-59b0-47d9-8d63-6006a5957c47,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=5237c037-59b0-47d9-8d63-6006a5957c47,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-db-init-lx5q5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=5237c037-59b0-47d9-8d63-6006a5957c47;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=5237c037-59b0-47d9-8d63-6006a5957c47;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ddeeee85f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identity=4857 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=5237c037-59b0-47d9-8d63-6006a5957c47,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=5237c037-59b0-47d9-8d63-6006a5957c47,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-db-init-lx5q5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ddeeee85f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identity=4857 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-db-init-lx5q5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9cecbe452 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2564 identity=29012 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/neutron-rpc-server-57f44dbbc-8422d subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9cecbe452 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2564 identity=29012 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/neutron-rpc-server-57f44dbbc-8422d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7e4bf4aeb2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4030 identity=6946 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-server-69ff694476-hcmkc subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e4bf4aeb2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4030 identity=6946 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/neutron-server-69ff694476-hcmkc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1ddeeee85f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2073 identity=4857 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-db-init-lx5q5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ddeeee85f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2073 identity=4857 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-db-init-lx5q5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ddeeee85f endpointID=2073 k8sNamespace=openstack k8sPodName=neutron-db-init-lx5q5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=5237c037-59b0-47d9-8d63-6006a5957c47 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=5237c037-59b0-47d9-8d63-6006a5957c47 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=1ddeeee85f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2073 identity=4857 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-db-init-lx5q5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 c3d42b87-7ea5-4507-93a8-6b04e5698d7c default }" containerID=dfc53c93fcff33255d821c1acd0a81a0a92d5dee8afb20d598616370fa29d980 datapathConfiguration="&{false false false false false }" interface=lxc38255b664f44 k8sPodName=openstack/neutron-db-sync-xlcxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfc53c93fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-db-sync-xlcxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfc53c93fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=0a57d1ec-ef2d-42cd-879c-777ac59309ec,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=0a57d1ec-ef2d-42cd-879c-777ac59309ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-db-sync-xlcxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dfc53c93fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-db-sync-xlcxz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=0a57d1ec-ef2d-42cd-879c-777ac59309ec;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=0a57d1ec-ef2d-42cd-879c-777ac59309ec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dfc53c93fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identity=13834 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=0a57d1ec-ef2d-42cd-879c-777ac59309ec,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=0a57d1ec-ef2d-42cd-879c-777ac59309ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-db-sync-xlcxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfc53c93fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identity=13834 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-db-sync-xlcxz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfc53c93fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2213 identity=13834 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-db-sync-xlcxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfc53c93fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2213 identity=13834 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-db-sync-xlcxz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dfc53c93fc endpointID=2213 k8sNamespace=openstack k8sPodName=neutron-db-sync-xlcxz subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=0a57d1ec-ef2d-42cd-879c-777ac59309ec k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=0a57d1ec-ef2d-42cd-879c-777ac59309ec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=dfc53c93fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2213 identity=13834 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-db-sync-xlcxz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 821d2229-f172-473c-aa42-2efa255c31f7 default }" containerID=bcacffe2246a237d6209adedb5106b6d086613c2cc7130988124d839ff458624 datapathConfiguration="&{false false false false false }" interface=lxce56e439ed338 k8sPodName=openstack/neutron-rabbit-init-64szm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcacffe224 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-rabbit-init-64szm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcacffe224 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=ba2103d4-7eef-45dd-915f-f4005dd0ca1a,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ba2103d4-7eef-45dd-915f-f4005dd0ca1a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-rabbit-init-64szm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=ba2103d4-7eef-45dd-915f-f4005dd0ca1a;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ba2103d4-7eef-45dd-915f-f4005dd0ca1a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcacffe224 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identity=7772 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=ba2103d4-7eef-45dd-915f-f4005dd0ca1a,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ba2103d4-7eef-45dd-915f-f4005dd0ca1a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-rabbit-init-64szm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bcacffe224 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identity=7772 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-rabbit-init-64szm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bcacffe224 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2139 identity=7772 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-rabbit-init-64szm subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcacffe224 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2139 identity=7772 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-rabbit-init-64szm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bcacffe224 endpointID=2139 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-64szm subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=ba2103d4-7eef-45dd-915f-f4005dd0ca1a k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ba2103d4-7eef-45dd-915f-f4005dd0ca1a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=bcacffe224 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2139 identity=7772 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/neutron-rabbit-init-64szm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 a59c81c6-00e7-4647-be39-1b9f8f90d363 default }" containerID=cf7d66edc05d03f057d6bb58fc3a761b0c7d26b58652f6dd9dd5a50a86fd828f datapathConfiguration="&{false false false false false }" interface=lxcbc33f1960365 k8sPodName=openstack/neutron-ks-service-2gbvg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf7d66edc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2704 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/neutron-ks-service-2gbvg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf7d66edc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2704 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=cc0594a7-391b-46a9-9815-a6223368c12e,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=cc0594a7-391b-46a9-9815-a6223368c12e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/neutron-ks-service-2gbvg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=cc0594a7-391b-46a9-9815-a6223368c12e;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=cc0594a7-391b-46a9-9815-a6223368c12e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf7d66edc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2704 identity=612 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=cc0594a7-391b-46a9-9815-a6223368c12e,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=cc0594a7-391b-46a9-9815-a6223368c12e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/neutron-ks-service-2gbvg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf7d66edc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2704 identity=612 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/neutron-ks-service-2gbvg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf7d66edc0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2704 identity=612 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/neutron-ks-service-2gbvg subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf7d66edc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2704 identity=612 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/neutron-ks-service-2gbvg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cf7d66edc0 endpointID=2704 k8sNamespace=openstack k8sPodName=neutron-ks-service-2gbvg subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=cc0594a7-391b-46a9-9815-a6223368c12e k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=cc0594a7-391b-46a9-9815-a6223368c12e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=cf7d66edc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2704 identity=612 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/neutron-ks-service-2gbvg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 93e5aafe-047f-49fa-be77-1771dcf0ae94 default }" containerID=399a69b6e671eb28c7a89cd4559bf2fb36ebf6a2db4d5bc26f68a31127f3c891 datapathConfiguration="&{false false false false false }" interface=lxc4991720ebe6a k8sPodName=openstack/neutron-ks-endpoints-9sfgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=399a69b6e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-ks-endpoints-9sfgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=399a69b6e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=0fbce4d9-060c-4eae-a6d2-edbba85b54ce,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0fbce4d9-060c-4eae-a6d2-edbba85b54ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-ks-endpoints-9sfgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=0fbce4d9-060c-4eae-a6d2-edbba85b54ce;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0fbce4d9-060c-4eae-a6d2-edbba85b54ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=399a69b6e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identity=33526 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=0fbce4d9-060c-4eae-a6d2-edbba85b54ce,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0fbce4d9-060c-4eae-a6d2-edbba85b54ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-ks-endpoints-9sfgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=399a69b6e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identity=33526 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-ks-endpoints-9sfgn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=399a69b6e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2999 identity=33526 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-ks-endpoints-9sfgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=399a69b6e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2999 identity=33526 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-ks-endpoints-9sfgn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=399a69b6e6 endpointID=2999 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-9sfgn subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=0fbce4d9-060c-4eae-a6d2-edbba85b54ce k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0fbce4d9-060c-4eae-a6d2-edbba85b54ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=399a69b6e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2999 identity=33526 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-ks-endpoints-9sfgn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 5a2df371-3337-4adc-9c09-b545aad177da default }" containerID=7f292dbcf1483df8328e8871a712206120dc8865b3978dac672483dc9973f99f datapathConfiguration="&{false false false false false }" interface=lxc951e1a3c9c0c k8sPodName=openstack/neutron-ks-user-tdslc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f292dbcf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-ks-user-tdslc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f292dbcf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=6317f7af-3214-454f-9f43-239f821241dd,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=6317f7af-3214-454f-9f43-239f821241dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-ks-user-tdslc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=6317f7af-3214-454f-9f43-239f821241dd;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=6317f7af-3214-454f-9f43-239f821241dd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f292dbcf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 identity=35500 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=6317f7af-3214-454f-9f43-239f821241dd,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=6317f7af-3214-454f-9f43-239f821241dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-ks-user-tdslc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f292dbcf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 identity=35500 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-ks-user-tdslc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f292dbcf1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1449 identity=35500 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-ks-user-tdslc subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f292dbcf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1449 identity=35500 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-ks-user-tdslc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f292dbcf1 endpointID=1449 k8sNamespace=openstack k8sPodName=neutron-ks-user-tdslc subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=6317f7af-3214-454f-9f43-239f821241dd k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=6317f7af-3214-454f-9f43-239f821241dd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=7f292dbcf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1449 identity=35500 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-ks-user-tdslc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 52fee246-ad6a-4c29-bd41-d2bb48ad24d9 default }" containerID=46f82005e44720f55df09b7de097e3502f4b4389e00623d23edf5e18b3633097 datapathConfiguration="&{false false false false false }" interface=lxc77f863842c5c k8sPodName=openstack/nova-service-cleaner-29695920-pgpgr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46f82005e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-service-cleaner-29695920-pgpgr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46f82005e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f43f2382-2a70-4da1-be22-a6f3ef0de196,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29695920,k8s:component=service-cleaner,k8s:controller-uid=f43f2382-2a70-4da1-be22-a6f3ef0de196,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29695920,k8s:release_group=nova" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-service-cleaner-29695920-pgpgr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=f43f2382-2a70-4da1-be22-a6f3ef0de196;k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29695920;k8s:component=service-cleaner;k8s:controller-uid=f43f2382-2a70-4da1-be22-a6f3ef0de196;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-service-cleaner-29695920;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46f82005e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 identity=1812 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f43f2382-2a70-4da1-be22-a6f3ef0de196,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29695920,k8s:component=service-cleaner,k8s:controller-uid=f43f2382-2a70-4da1-be22-a6f3ef0de196,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29695920,k8s:release_group=nova" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-service-cleaner-29695920-pgpgr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46f82005e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 identity=1812 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-service-cleaner-29695920-pgpgr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 1551d4f9-ba13-4495-bddf-634555388422 default }" containerID=85a4f6ee481233e0610b9c4668c90b540354960c7b6b6c125974cc165bf1306f datapathConfiguration="&{false false false false false }" interface=lxcd083882d00ff k8sPodName=openstack/nova-cell-setup-29695920-rwkjj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85a4f6ee48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1200 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-cell-setup-29695920-rwkjj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85a4f6ee48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1200 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9812d2ec-c83b-4c3e-8bf8-54293d65f506,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29695920,k8s:component=cell-setup,k8s:controller-uid=9812d2ec-c83b-4c3e-8bf8-54293d65f506,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29695920,k8s:release_group=nova" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-cell-setup-29695920-rwkjj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=9812d2ec-c83b-4c3e-8bf8-54293d65f506;k8s:batch.kubernetes.io/job-name=nova-cell-setup-29695920;k8s:component=cell-setup;k8s:controller-uid=9812d2ec-c83b-4c3e-8bf8-54293d65f506;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup-29695920;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85a4f6ee48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1200 identity=44090 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9812d2ec-c83b-4c3e-8bf8-54293d65f506,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29695920,k8s:component=cell-setup,k8s:controller-uid=9812d2ec-c83b-4c3e-8bf8-54293d65f506,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29695920,k8s:release_group=nova" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-cell-setup-29695920-rwkjj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85a4f6ee48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1200 identity=44090 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-cell-setup-29695920-rwkjj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46f82005e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1010 identity=1812 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-service-cleaner-29695920-pgpgr subsys=endpoint level=info msg="Successful endpoint creation" containerID=46f82005e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1010 identity=1812 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-service-cleaner-29695920-pgpgr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=85a4f6ee48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1200 identity=44090 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-cell-setup-29695920-rwkjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=85a4f6ee48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1200 identity=44090 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-cell-setup-29695920-rwkjj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=46f82005e4 endpointID=1010 k8sNamespace=openstack k8sPodName=nova-service-cleaner-29695920-pgpgr subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=f43f2382-2a70-4da1-be22-a6f3ef0de196 k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29695920 k8s:component=service-cleaner k8s:controller-uid=f43f2382-2a70-4da1-be22-a6f3ef0de196 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-service-cleaner-29695920 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=46f82005e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1010 identity=1812 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/nova-service-cleaner-29695920-pgpgr subsys=endpoint