level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.087557ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="54.941µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.073227ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.77µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=103.509524ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.2µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.42µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="71.982µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="98.022µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="113.963µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="466.822µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.53µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=36.7197ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.696597ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="374.71µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="927.813µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="302.888µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="125.283µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="163.624µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=118.116179ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="139.584µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="4.32µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.144.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.573236ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="18.68µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.682958ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.17µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.935149ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="2.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.18µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration=850ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration=870ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.34µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="11.75µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="45.641µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="324.398µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.731µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="209.916µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="917.762µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.336403ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.11µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="13.621µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.144 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.144 ipAddr.ipv6="" k8sNodeIP=199.204.45.144 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.144" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.90" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.144" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.144} {CiliumInternalIP 10.0.0.90}] 10.0.0.0/24 [] [] 10.0.0.30 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46847" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.750792416s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="15.551µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.12µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="63.982µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.64µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=4.07237717s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=301.378431ms file-path=/var/run/cilium/state/templates/2c7974b8a6d12541610cecc69113da853b40e017e803ff9a99acd3b20d5091a5/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2005 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 ipv4=10.0.0.30 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identityLabels="reserved:health" ipv4=10.0.0.30 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identity=4 identityLabels="reserved:health" ipv4=10.0.0.30 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.125380809s file-path=/var/run/cilium/state/templates/60036264a0e0bc0a72d01571917307457b2d48cad0080de513e729320534bff4/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1414 identity=4 ipv4=10.0.0.30 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 91ee23ba-e710-4139-898d-e8ade549e1a4 default }" containerID=799ffbd808cb0fc69e46d5d268ece0a860ce4cf1818010b7cdc82db19e505f22 datapathConfiguration="&{false false false false false }" interface=lxc396372014269 k8sPodName=kube-system/coredns-7c96b6546b-9tb77 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=799ffbd808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 ipv4=10.0.0.221 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9tb77 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=799ffbd808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.221 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9tb77 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=799ffbd808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identity=4089 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.221 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9tb77 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=799ffbd808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identity=4089 ipv4=10.0.0.221 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9tb77 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=799ffbd808 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1146 identity=4089 ipv4=10.0.0.221 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9tb77 subsys=endpoint level=info msg="Successful endpoint creation" containerID=799ffbd808 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1146 identity=4089 ipv4=10.0.0.221 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9tb77 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.170 a43dc363-7db4-4e84-ac1b-e56298e673b7 default }" containerID=50a5a68448e9efa120c38c5e39223b176ecfc7a71fe587fb2036c2170a5c24b5 datapathConfiguration="&{false false false false false }" interface=lxc49cc29d2ffde k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9j5mq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50a5a68448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 ipv4=10.0.0.170 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9j5mq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50a5a68448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=0663e696-47e7-4762-a528-78d9de82bf25,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=0663e696-47e7-4762-a528-78d9de82bf25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.170 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9j5mq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=0663e696-47e7-4762-a528-78d9de82bf25;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=0663e696-47e7-4762-a528-78d9de82bf25;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50a5a68448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=10221 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=0663e696-47e7-4762-a528-78d9de82bf25,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=0663e696-47e7-4762-a528-78d9de82bf25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.170 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9j5mq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50a5a68448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=10221 ipv4=10.0.0.170 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9j5mq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50a5a68448 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=599 identity=10221 ipv4=10.0.0.170 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9j5mq subsys=endpoint level=info msg="Successful endpoint creation" containerID=50a5a68448 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=599 identity=10221 ipv4=10.0.0.170 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9j5mq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=50a5a68448 endpointID=599 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-9j5mq subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=0663e696-47e7-4762-a528-78d9de82bf25 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=0663e696-47e7-4762-a528-78d9de82bf25 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=50a5a68448 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=599 identity=10221 ipv4=10.0.0.170 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9j5mq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 f6a0bb65-0f83-4f64-b41e-0d5fc0d15796 default }" containerID=f5c9b1984a63e82bc84abd7abb77dc2f52e4958120b834843765593b043abb01 datapathConfiguration="&{false false false false false }" interface=lxc32196021ff9c k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hghhz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5c9b1984a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 ipv4=10.0.0.37 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hghhz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5c9b1984a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.37 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hghhz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5c9b1984a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=4454 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.37 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hghhz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5c9b1984a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=4454 ipv4=10.0.0.37 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hghhz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f5c9b1984a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=418 identity=4454 ipv4=10.0.0.37 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hghhz subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5c9b1984a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=418 identity=4454 ipv4=10.0.0.37 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hghhz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2005 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02005:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2005 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 6073ba60-d956-4086-b1aa-c7c4e9426378 default }" containerID=c34fb2c04b067f0861106df4e3a387d84ca2a0dda72ca4d9255f08d31a0e0bb5 datapathConfiguration="&{false false false false false }" interface=lxc2549b447d5b8 k8sPodName=kube-system/coredns-67659f764b-jz5fv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c34fb2c04b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-67659f764b-jz5fv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c34fb2c04b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-67659f764b-jz5fv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c34fb2c04b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=4089 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-67659f764b-jz5fv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c34fb2c04b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=4089 ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-67659f764b-jz5fv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 f9b52a84-6cdd-4354-a6c7-bd42c1957eb9 default }" containerID=dbb4d2188148823256bdf0a116631c709305f5be1ccff2a3a4a710b05940f7a3 datapathConfiguration="&{false false false false false }" interface=lxc2493f363b7ef k8sPodName=kube-system/coredns-67659f764b-8957t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbb4d21881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 ipv4=10.0.0.129 ipv6= k8sPodName=kube-system/coredns-67659f764b-8957t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbb4d21881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.129 ipv6= k8sPodName=kube-system/coredns-67659f764b-8957t subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dbb4d21881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 identity=4089 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.129 ipv6= k8sPodName=kube-system/coredns-67659f764b-8957t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbb4d21881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 identity=4089 ipv4=10.0.0.129 ipv6= k8sPodName=kube-system/coredns-67659f764b-8957t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c34fb2c04b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=423 identity=4089 ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-67659f764b-jz5fv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c34fb2c04b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=423 identity=4089 ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-67659f764b-jz5fv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dbb4d21881 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2837 identity=4089 ipv4=10.0.0.129 ipv6= k8sPodName=kube-system/coredns-67659f764b-8957t subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbb4d21881 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2837 identity=4089 ipv4=10.0.0.129 ipv6= k8sPodName=kube-system/coredns-67659f764b-8957t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.173 c3e7fa71-d046-4705-852f-1adbe215b550 default }" containerID=72845822ca27c990c5a5e87bdccd2257ed2f88cfe2b9562c95ea317d1575e2d0 datapathConfiguration="&{false false false false false }" interface=lxc47e51d0f609d k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5q5cg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72845822ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5q5cg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72845822ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5q5cg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=72845822ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 identity=54888 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5q5cg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72845822ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 identity=54888 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5q5cg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72845822ca datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2146 identity=54888 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5q5cg subsys=endpoint level=info msg="Successful endpoint creation" containerID=72845822ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2146 identity=54888 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5q5cg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=799ffbd808 endpointID=1146 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-9tb77 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=799ffbd808 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1146 identity=4089 ipv4=10.0.0.221 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9tb77 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 0b909a2d-7061-4f57-a4b3-d167a34fda26 default }" containerID=cd2b392f24c52f84562a10ed2d5665ff1909858cdd13986cd656800bbc04717d datapathConfiguration="&{false false false false false }" interface=lxcd326177c3b3a k8sPodName=cert-manager/cert-manager-75c4c745bc-zwd47 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd2b392f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zwd47 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd2b392f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zwd47 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd2b392f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=44558 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zwd47 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd2b392f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=44558 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zwd47 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cd2b392f24 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=297 identity=44558 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zwd47 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd2b392f24 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=297 identity=44558 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zwd47 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.7 886208c3-b456-4da7-b055-dd38d2dc3796 default }" containerID=9cd92ded9e37cc7102ca269a2c3839705bc8e1805e96a08fc08fa4e7107dc1ed datapathConfiguration="&{false false false false false }" interface=lxc800798b6c3ee k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6c8sj labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.239 a77661f6-dc34-431a-8150-46bd4995b5f2 default }" containerID=737f815d50f6bc57f6bf2387effc38d042e07aafe5b4790adbba356623d3af7e datapathConfiguration="&{false false false false false }" interface=lxc3146e0ed7c15 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pbvpg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9cd92ded9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6c8sj subsys=endpoint level=info msg="New endpoint" containerID=737f815d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2098 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pbvpg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=737f815d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2098 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pbvpg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9cd92ded9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6c8sj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=737f815d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2098 identity=13898 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pbvpg oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=737f815d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2098 identity=13898 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pbvpg subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9cd92ded9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identity=17036 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6c8sj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9cd92ded9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identity=17036 ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6c8sj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=737f815d50 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2098 identity=13898 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pbvpg subsys=endpoint level=info msg="Successful endpoint creation" containerID=737f815d50 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2098 identity=13898 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pbvpg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9cd92ded9e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=994 identity=17036 ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6c8sj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9cd92ded9e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=994 identity=17036 ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6c8sj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 55b89fb5-bcd1-4f8a-bb34-69471696cd97 default }" containerID=f0a5a3e9a89985993679a28dce15b5028291d879318c3c02ee84666d64d02d3b datapathConfiguration="&{false false false false false }" interface=lxcd5b74e4f27d8 k8sPodName=cert-manager/cert-manager-startupapicheck-bj879 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0a5a3e9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bj879 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0a5a3e9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4f7abc23-e92c-4054-b791-35a15b8d48eb,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4f7abc23-e92c-4054-b791-35a15b8d48eb,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bj879 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=4f7abc23-e92c-4054-b791-35a15b8d48eb;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=4f7abc23-e92c-4054-b791-35a15b8d48eb;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0a5a3e9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identity=60628 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4f7abc23-e92c-4054-b791-35a15b8d48eb,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4f7abc23-e92c-4054-b791-35a15b8d48eb,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bj879 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0a5a3e9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identity=60628 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bj879 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0a5a3e9a8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2947 identity=60628 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bj879 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0a5a3e9a8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2947 identity=60628 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bj879 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f0a5a3e9a8 endpointID=2947 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-bj879 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=4f7abc23-e92c-4054-b791-35a15b8d48eb k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=4f7abc23-e92c-4054-b791-35a15b8d48eb k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=f0a5a3e9a8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2947 identity=60628 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bj879 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 0c6e1241-a638-4105-97a0-ba524ca5767e default }" containerID=8f9e3ece2e943d6d39776730e42af15f9d39db1f5dd57c0ff07d6618c9f50ae5 datapathConfiguration="&{false false false false false }" interface=lxcce0410f42187 k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8bjf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f9e3ece2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2725 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8bjf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f9e3ece2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2725 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=101d68aa-4d04-4f7b-8817-9ad24c273382,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=101d68aa-4d04-4f7b-8817-9ad24c273382,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8bjf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=101d68aa-4d04-4f7b-8817-9ad24c273382;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=101d68aa-4d04-4f7b-8817-9ad24c273382;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8f9e3ece2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2725 identity=33164 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=101d68aa-4d04-4f7b-8817-9ad24c273382,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=101d68aa-4d04-4f7b-8817-9ad24c273382,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8bjf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f9e3ece2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2725 identity=33164 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8bjf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f9e3ece2e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2725 identity=33164 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8bjf subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f9e3ece2e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2725 identity=33164 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8bjf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f9e3ece2e endpointID=2725 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-v8bjf subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=101d68aa-4d04-4f7b-8817-9ad24c273382 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=101d68aa-4d04-4f7b-8817-9ad24c273382 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=8f9e3ece2e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2725 identity=33164 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v8bjf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 2a12c051-0eb4-48a4-8e58-20c644d0a752 default }" containerID=87436a6c3a25ad93f4bd6e14f9aeb28660ab81ac913a4d1e9393cc03ee1890aa datapathConfiguration="&{false false false false false }" interface=lxcb1adb4d9fca5 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-9plx7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87436a6c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-9plx7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87436a6c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-9plx7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87436a6c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 identity=35649 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-9plx7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=87436a6c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 identity=35649 ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-9plx7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87436a6c3a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2117 identity=35649 ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-9plx7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=87436a6c3a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2117 identity=35649 ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-9plx7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 8e6b5d62-3351-4058-bd58-ffcec9f921df default }" containerID=cdad512c1148ecf5431252bceb0be0c06e63621b5ae22079d2c05e82897728ca datapathConfiguration="&{false false false false false }" interface=lxc6e77bea5d2c4 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jkkbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdad512c11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 ipv4=10.0.0.130 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jkkbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdad512c11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=fb1b1c61-c31e-4dd2-81bf-57cff238eae2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=fb1b1c61-c31e-4dd2-81bf-57cff238eae2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.130 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jkkbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=fb1b1c61-c31e-4dd2-81bf-57cff238eae2;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=fb1b1c61-c31e-4dd2-81bf-57cff238eae2;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdad512c11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=13375 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=fb1b1c61-c31e-4dd2-81bf-57cff238eae2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=fb1b1c61-c31e-4dd2-81bf-57cff238eae2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.130 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jkkbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdad512c11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=13375 ipv4=10.0.0.130 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jkkbj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cdad512c11 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=242 identity=13375 ipv4=10.0.0.130 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jkkbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdad512c11 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=242 identity=13375 ipv4=10.0.0.130 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jkkbj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cdad512c11 endpointID=242 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-jkkbj subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=fb1b1c61-c31e-4dd2-81bf-57cff238eae2 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=fb1b1c61-c31e-4dd2-81bf-57cff238eae2 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=cdad512c11 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=242 identity=13375 ipv4=10.0.0.130 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jkkbj subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0d6a35f7-9836-432b-979d-edd66b7e9b95] Description:}]" policyAddRequest=4e9cc8bd-d87c-48cb-a713-38dda9f4794f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4e9cc8bd-d87c-48cb-a713-38dda9f4794f policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=837f038c-007c-4f34-9fae-7f360337a06d] Description:}]" policyAddRequest=036db166-16a8-4d48-a0f5-049c10139d17 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=036db166-16a8-4d48-a0f5-049c10139d17 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.172 b03805e7-07cf-47c3-aa76-78b3cfa3fe11 default }" containerID=54a45efada06f8c9108bcd784003a5c242d6cde3dc33a014da82cfb48b37f918 datapathConfiguration="&{false false false false false }" interface=lxc62a39a514dd0 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-scwnq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54a45efada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-scwnq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54a45efada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-scwnq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=54a45efada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-scwnq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=54a45efada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 identity=12184 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-scwnq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54a45efada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 identity=12184 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-scwnq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54a45efada datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=291 identity=12184 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-scwnq subsys=endpoint level=info msg="Successful endpoint creation" containerID=54a45efada datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=291 identity=12184 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-scwnq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.127 e80d52be-2fa4-4e53-8a6c-ca61248ad82f default }" containerID=c72d1e51c5ebbfae444620b821144b80ba695b14eff0a053c3d12ec0cc3e91a6 datapathConfiguration="&{false false false false false }" interface=lxca28ec2839625 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-wq45t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c72d1e51c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-wq45t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c72d1e51c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-wq45t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c72d1e51c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=40768 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-wq45t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c72d1e51c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=40768 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-wq45t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c72d1e51c5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=287 identity=40768 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-wq45t subsys=endpoint level=info msg="Successful endpoint creation" containerID=c72d1e51c5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=287 identity=40768 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-wq45t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.39 23c28618-7a5e-40d5-91ce-3c2f7fc9a422 default }" containerID=18d797a7f2339c2a6bdd12b62345b491b35591439e2959e21a96e4496060b28f datapathConfiguration="&{false false false false false }" interface=lxcbc4e003f4940 k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgphk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18d797a7f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgphk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18d797a7f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgphk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=18d797a7f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.39 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgphk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18d797a7f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 identity=15252 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgphk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18d797a7f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 identity=15252 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgphk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18d797a7f2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3381 identity=15252 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgphk subsys=endpoint level=info msg="Successful endpoint creation" containerID=18d797a7f2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3381 identity=15252 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgphk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.100 b15d36bd-493d-45b4-b8cc-1f0de6093d92 default }" containerID=c148258b994422a2900d395adda132afea666e7b036d125e97986c660d52f053 datapathConfiguration="&{false false false false false }" interface=lxccf81a70b4e3e k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c148258b99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c148258b99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c148258b99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=18612 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c148258b99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=18612 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c148258b99 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=32 identity=18612 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c148258b99 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=32 identity=18612 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.165 d324174a-4475-4d9a-a193-1efba77da686 default }" containerID=d29a3c2e97608084fdd51df5f5811115aa51c50c9bfd4666dca9ca807b640800 datapathConfiguration="&{false false false false false }" interface=lxcdb447c88ed9f k8sPodName=local-path-storage/helper-pod-create-pvc-88d9b9e5-60a0-4db8-a437-5ba228e3df5b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d29a3c2e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88d9b9e5-60a0-4db8-a437-5ba228e3df5b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d29a3c2e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88d9b9e5-60a0-4db8-a437-5ba228e3df5b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d29a3c2e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=26515 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88d9b9e5-60a0-4db8-a437-5ba228e3df5b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d29a3c2e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=26515 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88d9b9e5-60a0-4db8-a437-5ba228e3df5b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d29a3c2e97 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=50 identity=26515 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88d9b9e5-60a0-4db8-a437-5ba228e3df5b subsys=endpoint level=info msg="Successful endpoint creation" containerID=d29a3c2e97 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=50 identity=26515 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88d9b9e5-60a0-4db8-a437-5ba228e3df5b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d29a3c2e97 endpointID=50 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-88d9b9e5-60a0-4db8-a437-5ba228e3df5b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d29a3c2e97 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=50 identity=26515 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88d9b9e5-60a0-4db8-a437-5ba228e3df5b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 e91d5f25-4e18-4b9a-ab7b-ab20f53f4a00 default }" containerID=456354ebc107ab3dd2d1d563d60e4ed66b3b456b9487b4e2f5e5322e8ba9b9d4 datapathConfiguration="&{false false false false false }" interface=lxcf578c3edf295 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=456354ebc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=456354ebc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=456354ebc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=11368 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=456354ebc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=11368 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=456354ebc1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=45 identity=11368 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=456354ebc1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=45 identity=11368 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=75b4f1e0-4a42-4368-ae69-643f5869e366] Description:}]" policyAddRequest=305d723a-690d-46d3-b6d8-e8c59fc58475 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=305d723a-690d-46d3-b6d8-e8c59fc58475 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.182 4ab5fc18-495b-4dde-8f9b-576edf00aa51 default }" containerID=e8a139975667eae23f81630e3f32870a80d1d1a88241059399581ab36e0aa6a6 datapathConfiguration="&{false false false false false }" interface=lxcdb02fa9167f0 k8sPodName=local-path-storage/helper-pod-create-pvc-d764d864-dde7-4d17-836f-c1fd207b5495 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8a1399756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d764d864-dde7-4d17-836f-c1fd207b5495 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8a1399756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d764d864-dde7-4d17-836f-c1fd207b5495 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8a1399756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=26515 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d764d864-dde7-4d17-836f-c1fd207b5495 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8a1399756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=26515 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d764d864-dde7-4d17-836f-c1fd207b5495 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8a1399756 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=387 identity=26515 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d764d864-dde7-4d17-836f-c1fd207b5495 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8a1399756 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=387 identity=26515 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d764d864-dde7-4d17-836f-c1fd207b5495 subsys=daemon level=info msg="Delete endpoint request" containerID=e8a1399756 endpointID=387 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d764d864-dde7-4d17-836f-c1fd207b5495 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e8a1399756 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=387 identity=26515 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d764d864-dde7-4d17-836f-c1fd207b5495 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 dca3bd7d-3346-4445-a7d0-1757e47ab297 default }" containerID=9812ab82cb4a51e6a0b6f1e7c0fbae2e8f76de655f5c19259641bbb6072b3023 datapathConfiguration="&{false false false false false }" interface=lxc1062f04ac4e5 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9812ab82cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9812ab82cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9812ab82cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9812ab82cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identity=59965 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9812ab82cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identity=59965 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9812ab82cb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1873 identity=59965 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9812ab82cb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1873 identity=59965 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=62ab26e5-d133-4674-882f-66ca9c6164a4] Description:}]" policyAddRequest=6d21b01c-fe07-406e-826a-2ebcd5e5562f subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=6d21b01c-fe07-406e-826a-2ebcd5e5562f policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.125 87adbb2b-2a2d-49d6-9918-c75ac354b42c default }" containerID=6d439054e3b2522f82d29daf2660245e4bf57d99ea4eef323781dcd91156e2a6 datapathConfiguration="&{false false false false false }" interface=lxcce7011c633d9 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d439054e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 ipv4=10.0.0.125 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d439054e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.125 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d439054e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identity=59163 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.125 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d439054e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identity=59163 ipv4=10.0.0.125 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6d439054e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2449 identity=59163 ipv4=10.0.0.125 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d439054e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2449 identity=59163 ipv4=10.0.0.125 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008075533972702801 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.65 06581caf-9d80-4819-b93f-7609e178af01 default }" containerID=469bdb03a9eba7dce77fdb0ef9d597380b2ec6d0a3a797f145800c6e5fce8709 datapathConfiguration="&{false false false false false }" interface=lxcbed717a03d44 k8sPodName=monitoring/node-feature-discovery-worker-pgkvt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=469bdb03a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pgkvt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=469bdb03a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pgkvt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=469bdb03a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pgkvt line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=469bdb03a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=49453 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pgkvt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=469bdb03a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=49453 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pgkvt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 2aa0b839-4163-40e6-811d-1d6b25048290 default }" containerID=6674da098ab06e3643b72544101b3a9eb5fa96cca73e4369718641806ff7c9cb datapathConfiguration="&{false false false false false }" interface=lxcd8949009552f k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4kpdb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6674da098a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4kpdb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6674da098a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4kpdb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.48 554dd560-d76a-47f7-9c84-5d43eacfe2e7 default }" containerID=b63a98d4b16e049d447468811522f33db52a11c0675ccff40bcdbb53a32ebc57 datapathConfiguration="&{false false false false false }" interface=lxc044c5ce89bb8 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ndtrm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b63a98d4b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ndtrm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b63a98d4b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ndtrm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6674da098a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=7208 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4kpdb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6674da098a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=7208 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4kpdb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b63a98d4b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identity=19975 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ndtrm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b63a98d4b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identity=19975 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ndtrm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=469bdb03a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=94 identity=49453 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pgkvt subsys=endpoint level=info msg="Successful endpoint creation" containerID=469bdb03a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=94 identity=49453 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pgkvt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6674da098a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1460 identity=7208 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4kpdb subsys=endpoint level=info msg="Successful endpoint creation" containerID=6674da098a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1460 identity=7208 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4kpdb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b63a98d4b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3677 identity=19975 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ndtrm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b63a98d4b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3677 identity=19975 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ndtrm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.182 0c7fb495-b932-4131-ac32-afe32c57be86 default }" containerID=97ddac75a96b2170f3f24fbba1fc80769bf828c1756e9e3c3fd7ff8a14d9e156 datapathConfiguration="&{false false false false false }" interface=lxc8cb37c3c1ac4 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kq9r6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97ddac75a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 ipv4=10.0.0.182 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kq9r6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97ddac75a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.182 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kq9r6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97ddac75a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identity=48129 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.182 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kq9r6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97ddac75a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identity=48129 ipv4=10.0.0.182 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kq9r6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97ddac75a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1757 identity=48129 ipv4=10.0.0.182 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kq9r6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=97ddac75a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1757 identity=48129 ipv4=10.0.0.182 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kq9r6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2005 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-179-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02005:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2005 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 56194782-1ad9-4228-bd55-342b139027bf default }" containerID=ba9ff864fcbcb75d56aebacbddad783f057521f98ee677ed22a0c0079600a611 datapathConfiguration="&{false false false false false }" interface=lxcf617a8e7b689 k8sPodName=monitoring/kube-prometheus-stack-admission-create-pgl42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba9ff864fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pgl42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba9ff864fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e3e3a6ff-ed30-42e5-b069-efb34543dc5c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e3e3a6ff-ed30-42e5-b069-efb34543dc5c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pgl42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e3e3a6ff-ed30-42e5-b069-efb34543dc5c;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e3e3a6ff-ed30-42e5-b069-efb34543dc5c;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba9ff864fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identity=51702 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e3e3a6ff-ed30-42e5-b069-efb34543dc5c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e3e3a6ff-ed30-42e5-b069-efb34543dc5c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pgl42 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ba9ff864fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identity=51702 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pgl42 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba9ff864fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=687 identity=51702 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pgl42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba9ff864fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=687 identity=51702 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pgl42 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba9ff864fc endpointID=687 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-pgl42 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e3e3a6ff-ed30-42e5-b069-efb34543dc5c k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e3e3a6ff-ed30-42e5-b069-efb34543dc5c k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=ba9ff864fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=687 identity=51702 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pgl42 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 4019d1d2-fd05-4acc-8339-be557f03c5d1 default }" containerID=ed7a17fd952a7b0709bf69c9df2f64155c0c6d9935907f9ecaeb27aae13824b1 datapathConfiguration="&{false false false false false }" interface=lxcb30aa52b26d7 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bmglw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed7a17fd95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bmglw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed7a17fd95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bmglw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ed7a17fd95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=20043 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bmglw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed7a17fd95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=20043 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bmglw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 4cefdfef-c117-4ade-9408-aa9848e9b634 default }" containerID=175949f9937f0942d6bacfb7c57e214f12ee36cd55c854c2160fdba5c8842ea2 datapathConfiguration="&{false false false false false }" interface=lxcb9ff0e73de65 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mdwcv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=175949f993 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mdwcv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=175949f993 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mdwcv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=175949f993 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identity=8191 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mdwcv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=175949f993 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identity=8191 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mdwcv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed7a17fd95 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1192 identity=20043 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bmglw subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed7a17fd95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1192 identity=20043 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bmglw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.59 6af4b73c-a35c-4e9c-ab55-94de0ad2ffea default }" containerID=a8051a44ab777fedf0921e712ea28042d94f992611a451ca6e993fa4d774bb78 datapathConfiguration="&{false false false false false }" interface=lxc0f77f6cab58e k8sPodName=monitoring/kube-prometheus-stack-grafana-d468b9d45-7mqqz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8051a44ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d468b9d45-7mqqz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8051a44ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d468b9d45-7mqqz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8051a44ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=29784 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d468b9d45-7mqqz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8051a44ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=29784 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d468b9d45-7mqqz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=175949f993 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1252 identity=8191 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mdwcv subsys=endpoint level=info msg="Successful endpoint creation" containerID=175949f993 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1252 identity=8191 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mdwcv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a8051a44ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=490 identity=29784 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d468b9d45-7mqqz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8051a44ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=490 identity=29784 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d468b9d45-7mqqz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.33 c1c8af26-7161-49c2-9a6c-d1ddbcb433b5 default }" containerID=0a6c4248149e1990c27b947968f4f43c6b6ecce29d1c0199d45dda8898e326b8 datapathConfiguration="&{false false false false false }" interface=lxc5d8f68052022 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sh5vf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a6c424814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sh5vf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a6c424814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=da9660e1-9540-4bd4-bb44-cc0f5d7dc774,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=da9660e1-9540-4bd4-bb44-cc0f5d7dc774,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sh5vf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=da9660e1-9540-4bd4-bb44-cc0f5d7dc774;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=da9660e1-9540-4bd4-bb44-cc0f5d7dc774;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a6c424814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identity=62583 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=da9660e1-9540-4bd4-bb44-cc0f5d7dc774,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=da9660e1-9540-4bd4-bb44-cc0f5d7dc774,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sh5vf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a6c424814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identity=62583 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sh5vf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a6c424814 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1000 identity=62583 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sh5vf subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a6c424814 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1000 identity=62583 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sh5vf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0a6c424814 endpointID=1000 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-sh5vf subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=da9660e1-9540-4bd4-bb44-cc0f5d7dc774 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=da9660e1-9540-4bd4-bb44-cc0f5d7dc774 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0a6c424814 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1000 identity=62583 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sh5vf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 580d871d-da1d-4553-b2c4-3f55ff886b62 default }" containerID=39b66a56aa5e080562fd0c9ded930a063ab9798661ae932ca0ef9105c852d211 datapathConfiguration="&{false false false false false }" interface=lxc78d82cbcfce9 k8sPodName=local-path-storage/helper-pod-create-pvc-0b29ee4a-2ebb-4ce4-b401-d39d7b1390c0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39b66a56aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b29ee4a-2ebb-4ce4-b401-d39d7b1390c0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39b66a56aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b29ee4a-2ebb-4ce4-b401-d39d7b1390c0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39b66a56aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 identity=26515 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b29ee4a-2ebb-4ce4-b401-d39d7b1390c0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39b66a56aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 identity=26515 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b29ee4a-2ebb-4ce4-b401-d39d7b1390c0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39b66a56aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1369 identity=26515 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b29ee4a-2ebb-4ce4-b401-d39d7b1390c0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=39b66a56aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1369 identity=26515 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b29ee4a-2ebb-4ce4-b401-d39d7b1390c0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.71 8c944070-b612-4973-bc50-699de4d56568 default }" containerID=22e243b76f2ca46e0adbbf825fa31ce1cae6594fa4dd09af08e92b6ddd7afb7a datapathConfiguration="&{false false false false false }" interface=lxc356429ed0ed8 k8sPodName=local-path-storage/helper-pod-create-pvc-dc6a2d08-8904-495b-96a6-79439beffbc0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22e243b76f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc6a2d08-8904-495b-96a6-79439beffbc0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22e243b76f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc6a2d08-8904-495b-96a6-79439beffbc0 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=22e243b76f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identity=26515 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc6a2d08-8904-495b-96a6-79439beffbc0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22e243b76f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identity=26515 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc6a2d08-8904-495b-96a6-79439beffbc0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22e243b76f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=371 identity=26515 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc6a2d08-8904-495b-96a6-79439beffbc0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22e243b76f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=371 identity=26515 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc6a2d08-8904-495b-96a6-79439beffbc0 subsys=daemon level=info msg="Delete endpoint request" containerID=39b66a56aa endpointID=1369 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0b29ee4a-2ebb-4ce4-b401-d39d7b1390c0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=39b66a56aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1369 identity=26515 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b29ee4a-2ebb-4ce4-b401-d39d7b1390c0 subsys=endpoint level=info msg="Delete endpoint request" containerID=22e243b76f endpointID=371 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dc6a2d08-8904-495b-96a6-79439beffbc0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=22e243b76f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=371 identity=26515 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc6a2d08-8904-495b-96a6-79439beffbc0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 80c6c8e9-59ca-4ef2-902a-81d239adfb97 default }" containerID=c30fab2dca31b101e97b8418887af756af70d2e9b8b4de460c2213d4c4fefae8 datapathConfiguration="&{false false false false false }" interface=lxc9c1bb3ccbcd1 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c30fab2dca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c30fab2dca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c30fab2dca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c30fab2dca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=35159 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c30fab2dca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=35159 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c30fab2dca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=270 identity=35159 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c30fab2dca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=270 identity=35159 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.184 c378ab67-c6cc-4fed-aaeb-f00bf787042c default }" containerID=f4274bbc20d105a5418f793e3fd6e88e0932338603bef885bc0a870734904a4a datapathConfiguration="&{false false false false false }" interface=lxc9a26f2fb93a4 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4274bbc20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4274bbc20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4274bbc20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identity=2450 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4274bbc20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identity=2450 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4274bbc20 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1752 identity=2450 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4274bbc20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1752 identity=2450 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.246 86b05be3-3099-4653-ba5b-2f2149eaf57e default }" containerID=753780b0d38aeb81ca925d260c4808b0fbfa0ec3b7256c57d0f637804102dad8 datapathConfiguration="&{false false false false false }" interface=lxc244f5b5ef639 k8sPodName=monitoring/loki-gateway-cf54cb88c-xkf2s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=753780b0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xkf2s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=753780b0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xkf2s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=753780b0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=1690 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xkf2s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=753780b0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=1690 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xkf2s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 c297e36e-5686-4da6-97af-821d79dc2300 default }" containerID=9c860931fd550b9820c083d473cc8f74c3650b74a6b128dbd0ce2cdca84110a0 datapathConfiguration="&{false false false false false }" interface=lxcbfc220c0c3e1 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c860931fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c860931fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c860931fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identity=15603 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c860931fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identity=15603 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=753780b0d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1588 identity=1690 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xkf2s subsys=endpoint level=info msg="Successful endpoint creation" containerID=753780b0d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1588 identity=1690 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xkf2s subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.77 2d97654a-ea18-4572-9560-efc1f071dd41 default }" containerID=ba3e8bdfb5a961e831a2f5d9c92dd39fac280d62cab660e6768ad75a6752cf92 datapathConfiguration="&{false false false false false }" interface=lxca970aec46900 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba3e8bdfb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba3e8bdfb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba3e8bdfb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identity=25692 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba3e8bdfb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identity=25692 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c860931fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=433 identity=15603 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c860931fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=433 identity=15603 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ba3e8bdfb5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=623 identity=25692 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba3e8bdfb5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=623 identity=25692 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.5 4ac4963a-fc0c-457b-bed5-7734bfb28833 default }" containerID=3dc25291bf08235cf5f731615738d39a33c6e56a114da24305189b871ae51ca7 datapathConfiguration="&{false false false false false }" interface=lxca2bf6a27382c k8sPodName=local-path-storage/helper-pod-create-pvc-5cbd33ee-cef0-4a81-a0a6-53f294302969 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3dc25291bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5cbd33ee-cef0-4a81-a0a6-53f294302969 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3dc25291bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5cbd33ee-cef0-4a81-a0a6-53f294302969 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3dc25291bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identity=26515 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5cbd33ee-cef0-4a81-a0a6-53f294302969 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3dc25291bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identity=26515 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5cbd33ee-cef0-4a81-a0a6-53f294302969 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3dc25291bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1000 identity=26515 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5cbd33ee-cef0-4a81-a0a6-53f294302969 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3dc25291bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1000 identity=26515 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5cbd33ee-cef0-4a81-a0a6-53f294302969 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.175 48e150ae-32be-4aa9-bd34-c87e5fc675f0 default }" containerID=b43b3d52fdee92b8328cef21346d96e0ec261936006ca0a174610b74b250b5bb datapathConfiguration="&{false false false false false }" interface=lxc2d178364792b k8sPodName=monitoring/vector-p9qbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b43b3d52fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-p9qbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b43b3d52fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-p9qbv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b43b3d52fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-p9qbv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b43b3d52fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identity=40795 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-p9qbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b43b3d52fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identity=40795 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-p9qbv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b43b3d52fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3358 identity=40795 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-p9qbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b43b3d52fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3358 identity=40795 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-p9qbv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3dc25291bf endpointID=1000 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5cbd33ee-cef0-4a81-a0a6-53f294302969 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3dc25291bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1000 identity=26515 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5cbd33ee-cef0-4a81-a0a6-53f294302969 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 161a8728-15c9-430f-99aa-91e244aae8fe default }" containerID=01dbd79edf99e4f93228274d5b604a7440ad9f62963b0fe4c81dde73dd2f5ea1 datapathConfiguration="&{false false false false false }" interface=lxc3bdfbae969ec k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01dbd79edf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3271 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01dbd79edf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3271 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=01dbd79edf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3271 identity=55361 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01dbd79edf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3271 identity=55361 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01dbd79edf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3271 identity=55361 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=01dbd79edf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3271 identity=55361 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.93 e934a366-e674-4526-873b-66ea443c02a5 default }" containerID=fe9ffb185476b4b0a48109e460988999214b409d4d63654b58c4e46996af1279 datapathConfiguration="&{false false false false false }" interface=lxcdd486daa677e k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8jmtx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe9ffb1854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8jmtx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe9ffb1854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8jmtx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe9ffb1854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identity=9525 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8jmtx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe9ffb1854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identity=9525 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8jmtx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe9ffb1854 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2147 identity=9525 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8jmtx subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe9ffb1854 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2147 identity=9525 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8jmtx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.141 a9f6138d-ddb5-420f-b60b-635fc4689172 default }" containerID=53bc410e1a6cbd170cf318fc345808e05359992db83292de8c02be0152d3b7e4 datapathConfiguration="&{false false false false false }" interface=lxc9a5755048e57 k8sPodName=openstack/memcached-memcached-6479589586-db7gv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53bc410e1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2436 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-db7gv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53bc410e1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2436 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-db7gv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=53bc410e1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2436 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-db7gv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53bc410e1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2436 identity=11947 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-db7gv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53bc410e1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2436 identity=11947 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-db7gv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53bc410e1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2436 identity=11947 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-db7gv subsys=endpoint level=info msg="Successful endpoint creation" containerID=53bc410e1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2436 identity=11947 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-db7gv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 bf8d7919-035d-4b58-bc32-5999c51e3029 default }" containerID=2f5f4980188e9cc9379027312664f07be7d5ab6757b084e58de987108e0b8183 datapathConfiguration="&{false false false false false }" interface=lxca5c1bcd5b9f6 k8sPodName=local-path-storage/helper-pod-create-pvc-e3ab5ffd-4880-4a6f-ba2a-f3eae8e43a06 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f5f498018 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3ab5ffd-4880-4a6f-ba2a-f3eae8e43a06 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f5f498018 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3ab5ffd-4880-4a6f-ba2a-f3eae8e43a06 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f5f498018 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=26515 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3ab5ffd-4880-4a6f-ba2a-f3eae8e43a06 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f5f498018 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=26515 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3ab5ffd-4880-4a6f-ba2a-f3eae8e43a06 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f5f498018 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1038 identity=26515 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3ab5ffd-4880-4a6f-ba2a-f3eae8e43a06 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f5f498018 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1038 identity=26515 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3ab5ffd-4880-4a6f-ba2a-f3eae8e43a06 subsys=daemon level=info msg="Delete endpoint request" containerID=2f5f498018 endpointID=1038 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e3ab5ffd-4880-4a6f-ba2a-f3eae8e43a06 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2f5f498018 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1038 identity=26515 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3ab5ffd-4880-4a6f-ba2a-f3eae8e43a06 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 5d182d70-3b29-4606-aea7-589bc2475355 default }" containerID=0d0a1e699bd4f808f00dd241f175a1ad335ba6ebc29206c95dc8c7066aa7cb32 datapathConfiguration="&{false false false false false }" interface=lxc7e107ed51e29 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d0a1e699b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d0a1e699b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0d0a1e699b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d0a1e699b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identity=27860 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d0a1e699b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identity=27860 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d0a1e699b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1514 identity=27860 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d0a1e699b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1514 identity=27860 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 f99c9d99-0c87-488a-a7e4-1868e52427a6 default }" containerID=b97fa38c88aad34296ff0793fe258c40906951a12e6e6539a9ee0aecdecca066 datapathConfiguration="&{false false false false false }" interface=lxc78ddf77d3565 k8sPodName=openstack/keystone-credential-setup-2tk8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b97fa38c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2568 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-2tk8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b97fa38c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2568 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=73b50681-fdfa-4e93-9e95-04aace579385,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=73b50681-fdfa-4e93-9e95-04aace579385,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-2tk8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=73b50681-fdfa-4e93-9e95-04aace579385;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=73b50681-fdfa-4e93-9e95-04aace579385;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b97fa38c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2568 identity=13250 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=73b50681-fdfa-4e93-9e95-04aace579385,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=73b50681-fdfa-4e93-9e95-04aace579385,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-2tk8m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b97fa38c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2568 identity=13250 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-2tk8m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b97fa38c88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2568 identity=13250 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-2tk8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=b97fa38c88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2568 identity=13250 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-2tk8m subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.52 d1a6f448-10d6-4a87-b94f-8825d2e2dafc default }" containerID=62d23e76f37caa902d8ea7af442719c6b7cf110d9598c2efebc63b6177ebedca datapathConfiguration="&{false false false false false }" interface=lxcdd16d6690de4 k8sPodName=openstack/keystone-api-864bd94c9c-4rlrg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62d23e76f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-api-864bd94c9c-4rlrg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62d23e76f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-api-864bd94c9c-4rlrg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62d23e76f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identity=15021 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-api-864bd94c9c-4rlrg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62d23e76f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identity=15021 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-api-864bd94c9c-4rlrg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62d23e76f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=241 identity=15021 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-api-864bd94c9c-4rlrg subsys=endpoint level=info msg="Successful endpoint creation" containerID=62d23e76f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=241 identity=15021 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-api-864bd94c9c-4rlrg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b97fa38c88 endpointID=2568 k8sNamespace=openstack k8sPodName=keystone-credential-setup-2tk8m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=73b50681-fdfa-4e93-9e95-04aace579385 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=73b50681-fdfa-4e93-9e95-04aace579385 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b97fa38c88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2568 identity=13250 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-2tk8m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 4f046722-bafb-4cbd-aacb-bd0766c0c76e default }" containerID=a50ae46f35ad193da4ad003f328caebeeff5f8359834e26f359d3d0338f4b571 datapathConfiguration="&{false false false false false }" interface=lxcb05b72881e29 k8sPodName=openstack/keystone-db-init-xljjj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a50ae46f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-xljjj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a50ae46f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f81a3656-6c07-4772-8d37-a3081f24c56b,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=f81a3656-6c07-4772-8d37-a3081f24c56b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-xljjj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a50ae46f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-xljjj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f81a3656-6c07-4772-8d37-a3081f24c56b;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=f81a3656-6c07-4772-8d37-a3081f24c56b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a50ae46f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identity=34559 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f81a3656-6c07-4772-8d37-a3081f24c56b,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=f81a3656-6c07-4772-8d37-a3081f24c56b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-xljjj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a50ae46f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identity=34559 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-xljjj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a50ae46f35 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=342 identity=34559 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-xljjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a50ae46f35 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=342 identity=34559 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-xljjj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a50ae46f35 endpointID=342 k8sNamespace=openstack k8sPodName=keystone-db-init-xljjj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f81a3656-6c07-4772-8d37-a3081f24c56b k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=f81a3656-6c07-4772-8d37-a3081f24c56b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a50ae46f35 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=342 identity=34559 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-xljjj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 c35e9a29-7fa2-4c62-85e6-f6b43bf48603 default }" containerID=63b869a744d61a41ac00e54163379e99460d218bebd9042d16cbd3254ad74294 datapathConfiguration="&{false false false false false }" interface=lxcf1d040524063 k8sPodName=openstack/keystone-fernet-setup-mqp5k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63b869a744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-fernet-setup-mqp5k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63b869a744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2220d675-1c56-40fe-9a83-9f9e2571d059,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=2220d675-1c56-40fe-9a83-9f9e2571d059,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-fernet-setup-mqp5k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2220d675-1c56-40fe-9a83-9f9e2571d059;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=2220d675-1c56-40fe-9a83-9f9e2571d059;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63b869a744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identity=8698 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2220d675-1c56-40fe-9a83-9f9e2571d059,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=2220d675-1c56-40fe-9a83-9f9e2571d059,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-fernet-setup-mqp5k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63b869a744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identity=8698 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-fernet-setup-mqp5k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=63b869a744 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=265 identity=8698 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-fernet-setup-mqp5k subsys=endpoint level=info msg="Successful endpoint creation" containerID=63b869a744 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=265 identity=8698 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-fernet-setup-mqp5k subsys=daemon level=info msg="Delete endpoint request" containerID=63b869a744 endpointID=265 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-mqp5k subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2220d675-1c56-40fe-9a83-9f9e2571d059 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=2220d675-1c56-40fe-9a83-9f9e2571d059 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=63b869a744 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=265 identity=8698 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-fernet-setup-mqp5k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 57b8b212-4c8b-4196-a0df-9bb09d64c114 default }" containerID=c90317165df6b6d8d1d0724dc6db6936a4b65856f51e8b7934061bf649b062b9 datapathConfiguration="&{false false false false false }" interface=lxc6fccc2dbe718 k8sPodName=openstack/keystone-db-sync-2pt7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c90317165d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2681 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-db-sync-2pt7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c90317165d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2681 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=691618bb-3444-4b46-a6b0-2bfa5ceea0b3,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=691618bb-3444-4b46-a6b0-2bfa5ceea0b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-db-sync-2pt7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=691618bb-3444-4b46-a6b0-2bfa5ceea0b3;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=691618bb-3444-4b46-a6b0-2bfa5ceea0b3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c90317165d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2681 identity=45768 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=691618bb-3444-4b46-a6b0-2bfa5ceea0b3,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=691618bb-3444-4b46-a6b0-2bfa5ceea0b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-db-sync-2pt7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c90317165d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2681 identity=45768 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-db-sync-2pt7f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c90317165d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2681 identity=45768 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-db-sync-2pt7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=c90317165d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2681 identity=45768 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-db-sync-2pt7f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c90317165d endpointID=2681 k8sNamespace=openstack k8sPodName=keystone-db-sync-2pt7f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=691618bb-3444-4b46-a6b0-2bfa5ceea0b3 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=691618bb-3444-4b46-a6b0-2bfa5ceea0b3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c90317165d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2681 identity=45768 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-db-sync-2pt7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 2ed3f86e-03a0-4fcb-a465-5bf403bf643e default }" containerID=c6730410c2311d3444a26aa3c22d98cce2a5934a9e646476aa9fd3276a8cff3a datapathConfiguration="&{false false false false false }" interface=lxc01a74ebf3fee k8sPodName=openstack/keystone-rabbit-init-vss88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6730410c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-rabbit-init-vss88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6730410c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ab389830-1790-4a4c-8690-7552d0453752,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ab389830-1790-4a4c-8690-7552d0453752,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-rabbit-init-vss88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ab389830-1790-4a4c-8690-7552d0453752;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ab389830-1790-4a4c-8690-7552d0453752;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6730410c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 identity=2723 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ab389830-1790-4a4c-8690-7552d0453752,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ab389830-1790-4a4c-8690-7552d0453752,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-rabbit-init-vss88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6730410c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 identity=2723 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-rabbit-init-vss88 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c6730410c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1411 identity=2723 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-rabbit-init-vss88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6730410c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1411 identity=2723 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-rabbit-init-vss88 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c6730410c2 endpointID=1411 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-vss88 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ab389830-1790-4a4c-8690-7552d0453752 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ab389830-1790-4a4c-8690-7552d0453752 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c6730410c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1411 identity=2723 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-rabbit-init-vss88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 017dae92-cd57-4c1b-9f06-1bdcd883876d default }" containerID=5978a6fa6bcd9e4d534f472fbe6424ee45f5a21937f077af841755f42c3e1fde datapathConfiguration="&{false false false false false }" interface=lxcdb05c0e975bf k8sPodName=openstack/keystone-domain-manage-qpqtk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5978a6fa6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-qpqtk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5978a6fa6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fc44f6bd-8c04-4b63-b833-c54ce098ce20,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=fc44f6bd-8c04-4b63-b833-c54ce098ce20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-qpqtk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fc44f6bd-8c04-4b63-b833-c54ce098ce20;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=fc44f6bd-8c04-4b63-b833-c54ce098ce20;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5978a6fa6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 identity=19041 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fc44f6bd-8c04-4b63-b833-c54ce098ce20,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=fc44f6bd-8c04-4b63-b833-c54ce098ce20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-qpqtk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5978a6fa6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 identity=19041 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-qpqtk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5978a6fa6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=828 identity=19041 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-qpqtk subsys=endpoint level=info msg="Successful endpoint creation" containerID=5978a6fa6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=828 identity=19041 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-qpqtk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5978a6fa6b endpointID=828 k8sNamespace=openstack k8sPodName=keystone-domain-manage-qpqtk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fc44f6bd-8c04-4b63-b833-c54ce098ce20 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=fc44f6bd-8c04-4b63-b833-c54ce098ce20 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5978a6fa6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=828 identity=19041 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-qpqtk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 7eb41d58-5be0-4906-8636-5884e31eac15 default }" containerID=15e2f10c4745eb94d868490eeb36a34bf8a62e2155a4934d577c3c600a4d5817 datapathConfiguration="&{false false false false false }" interface=lxc2f87fdcd9216 k8sPodName=openstack/keystone-bootstrap-982mv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15e2f10c47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1036 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-bootstrap-982mv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15e2f10c47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1036 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1e9e2f06-408a-4203-9bbe-d66180683a41,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=1e9e2f06-408a-4203-9bbe-d66180683a41,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-bootstrap-982mv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1e9e2f06-408a-4203-9bbe-d66180683a41;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=1e9e2f06-408a-4203-9bbe-d66180683a41;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15e2f10c47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1036 identity=47448 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1e9e2f06-408a-4203-9bbe-d66180683a41,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=1e9e2f06-408a-4203-9bbe-d66180683a41,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-bootstrap-982mv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15e2f10c47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1036 identity=47448 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-bootstrap-982mv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=15e2f10c47 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1036 identity=47448 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-bootstrap-982mv subsys=endpoint level=info msg="Successful endpoint creation" containerID=15e2f10c47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1036 identity=47448 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-bootstrap-982mv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15e2f10c47 endpointID=1036 k8sNamespace=openstack k8sPodName=keystone-bootstrap-982mv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1e9e2f06-408a-4203-9bbe-d66180683a41 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=1e9e2f06-408a-4203-9bbe-d66180683a41 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=15e2f10c47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1036 identity=47448 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-bootstrap-982mv subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03390506851353362 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.109 552e689f-a715-4ca4-a389-733cfcb6de3c default }" containerID=d48b98319eb4266b08430743d82eeff8593858d75adcc95ba7da4c8d58f7a811 datapathConfiguration="&{false false false false false }" interface=lxca655c793ba23 k8sPodName=local-path-storage/helper-pod-create-pvc-1873ce72-41d2-41b7-9dea-b6ef41972e63 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d48b98319e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1873ce72-41d2-41b7-9dea-b6ef41972e63 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d48b98319e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1873ce72-41d2-41b7-9dea-b6ef41972e63 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d48b98319e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identity=26515 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1873ce72-41d2-41b7-9dea-b6ef41972e63 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d48b98319e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identity=26515 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1873ce72-41d2-41b7-9dea-b6ef41972e63 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d48b98319e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=911 identity=26515 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1873ce72-41d2-41b7-9dea-b6ef41972e63 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d48b98319e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=911 identity=26515 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1873ce72-41d2-41b7-9dea-b6ef41972e63 subsys=daemon level=info msg="Delete endpoint request" containerID=d48b98319e endpointID=911 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1873ce72-41d2-41b7-9dea-b6ef41972e63 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d48b98319e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=911 identity=26515 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1873ce72-41d2-41b7-9dea-b6ef41972e63 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 3f35fe44-3aad-472c-869f-0e9763835785 default }" containerID=e6f3048857f89bc29dcf5f283538a57eabdf468ed987db42a110130c6e769f84 datapathConfiguration="&{false false false false false }" interface=lxc4212ef4ce9b3 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6f3048857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6f3048857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6f3048857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=43830 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6f3048857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=43830 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e6f3048857 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1433 identity=43830 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6f3048857 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1433 identity=43830 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.152 230ab933-5092-4d3c-90e4-6f77beca894b default }" containerID=d44deb1d248026e9b53b1b209419ae588cf265a3046c46ab3e9649459d14b66b datapathConfiguration="&{false false false false false }" interface=lxc3ef6cbb359d7 k8sPodName=openstack/barbican-api-5c679f7ff5-qf5jc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d44deb1d24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-api-5c679f7ff5-qf5jc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d44deb1d24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-api-5c679f7ff5-qf5jc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d44deb1d24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-api-5c679f7ff5-qf5jc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d44deb1d24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identity=6280 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-api-5c679f7ff5-qf5jc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d44deb1d24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identity=6280 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-api-5c679f7ff5-qf5jc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 51988f66-07c1-4d0b-a6af-fcc174f85d63 default }" containerID=b0a630bdb08239a80cb81c08c9b5bfd74613ec66b1ca1d5459ef83f2ebb89c36 datapathConfiguration="&{false false false false false }" interface=lxc964f6fdbec39 k8sPodName=openstack/barbican-db-init-dv8xb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0a630bdb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-db-init-dv8xb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0a630bdb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4241e0d5-bb1f-4d16-8bd1-33936ab49d34,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=4241e0d5-bb1f-4d16-8bd1-33936ab49d34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-db-init-dv8xb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4241e0d5-bb1f-4d16-8bd1-33936ab49d34;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=4241e0d5-bb1f-4d16-8bd1-33936ab49d34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0a630bdb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identity=30653 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4241e0d5-bb1f-4d16-8bd1-33936ab49d34,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=4241e0d5-bb1f-4d16-8bd1-33936ab49d34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-db-init-dv8xb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0a630bdb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identity=30653 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-db-init-dv8xb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d44deb1d24 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2462 identity=6280 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-api-5c679f7ff5-qf5jc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d44deb1d24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2462 identity=6280 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-api-5c679f7ff5-qf5jc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b0a630bdb0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2707 identity=30653 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-db-init-dv8xb subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0a630bdb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2707 identity=30653 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-db-init-dv8xb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b0a630bdb0 endpointID=2707 k8sNamespace=openstack k8sPodName=barbican-db-init-dv8xb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4241e0d5-bb1f-4d16-8bd1-33936ab49d34 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=4241e0d5-bb1f-4d16-8bd1-33936ab49d34 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b0a630bdb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2707 identity=30653 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-db-init-dv8xb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 4e3509a9-96f5-423f-96fc-7526399239d4 default }" containerID=080e2c5f7e2997939a609e52c8972118ca9ae4eba1b95fbff79494c1a8b375b7 datapathConfiguration="&{false false false false false }" interface=lxc475ee98b7545 k8sPodName=openstack/barbican-db-sync-mt5q7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=080e2c5f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-mt5q7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=080e2c5f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=594b5345-0a95-4066-82ad-202b03bc58e2,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=594b5345-0a95-4066-82ad-202b03bc58e2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-mt5q7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=594b5345-0a95-4066-82ad-202b03bc58e2;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=594b5345-0a95-4066-82ad-202b03bc58e2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=080e2c5f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-mt5q7 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=080e2c5f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=634 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=594b5345-0a95-4066-82ad-202b03bc58e2,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=594b5345-0a95-4066-82ad-202b03bc58e2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-mt5q7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=080e2c5f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=634 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-mt5q7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=080e2c5f7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=50 identity=634 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-mt5q7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=080e2c5f7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=50 identity=634 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-mt5q7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=080e2c5f7e endpointID=50 k8sNamespace=openstack k8sPodName=barbican-db-sync-mt5q7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=594b5345-0a95-4066-82ad-202b03bc58e2 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=594b5345-0a95-4066-82ad-202b03bc58e2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=080e2c5f7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=50 identity=634 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-mt5q7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 e1ed5301-bf34-4a8b-8fd5-e3cafb0345bb default }" containerID=fb988a6808a6a297a7886606575357a9b126ffb7b4a9062be091f8776c5450cb datapathConfiguration="&{false false false false false }" interface=lxcafe6bf94cdc0 k8sPodName=openstack/barbican-rabbit-init-t9zxn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb988a6808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2283 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-t9zxn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb988a6808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2283 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7e9529d1-a717-4294-9575-180912079304,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7e9529d1-a717-4294-9575-180912079304,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-t9zxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fb988a6808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2283 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-t9zxn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7e9529d1-a717-4294-9575-180912079304;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7e9529d1-a717-4294-9575-180912079304;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb988a6808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2283 identity=24333 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7e9529d1-a717-4294-9575-180912079304,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7e9529d1-a717-4294-9575-180912079304,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-t9zxn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb988a6808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2283 identity=24333 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-t9zxn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb988a6808 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2283 identity=24333 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-t9zxn subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb988a6808 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2283 identity=24333 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-t9zxn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb988a6808 endpointID=2283 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-t9zxn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7e9529d1-a717-4294-9575-180912079304 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7e9529d1-a717-4294-9575-180912079304 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fb988a6808 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2283 identity=24333 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-t9zxn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 1c01235b-d790-4008-9d57-fe82174a9fa4 default }" containerID=f88d9c597b8d5e3d6fedf5f65be6e99b541c6048b4193a0c0b3b7aaf147188b8 datapathConfiguration="&{false false false false false }" interface=lxce158c322d0c0 k8sPodName=openstack/barbican-ks-service-lbg7g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f88d9c597b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-service-lbg7g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f88d9c597b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0c093bac-c53a-47f5-a2f4-106dc891703f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=0c093bac-c53a-47f5-a2f4-106dc891703f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-service-lbg7g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0c093bac-c53a-47f5-a2f4-106dc891703f;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=0c093bac-c53a-47f5-a2f4-106dc891703f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f88d9c597b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identity=26484 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0c093bac-c53a-47f5-a2f4-106dc891703f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=0c093bac-c53a-47f5-a2f4-106dc891703f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-service-lbg7g oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f88d9c597b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identity=26484 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-service-lbg7g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f88d9c597b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=569 identity=26484 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-service-lbg7g subsys=endpoint level=info msg="Successful endpoint creation" containerID=f88d9c597b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=569 identity=26484 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-service-lbg7g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f88d9c597b endpointID=569 k8sNamespace=openstack k8sPodName=barbican-ks-service-lbg7g subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0c093bac-c53a-47f5-a2f4-106dc891703f k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=0c093bac-c53a-47f5-a2f4-106dc891703f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f88d9c597b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=569 identity=26484 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-service-lbg7g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 cd0824d8-03cf-4288-ad0c-a8cf2cc519a9 default }" containerID=5013572b94c6a69f4d8277b601340e6e4f445917d7defc1f56d9bb1d7008ef38 datapathConfiguration="&{false false false false false }" interface=lxc0019cf0c4ff5 k8sPodName=openstack/barbican-ks-endpoints-jkq2r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5013572b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jkq2r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5013572b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bdbeb6b0-e7ba-435a-a4c7-1f699424e08c,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bdbeb6b0-e7ba-435a-a4c7-1f699424e08c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jkq2r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5013572b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jkq2r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bdbeb6b0-e7ba-435a-a4c7-1f699424e08c;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=bdbeb6b0-e7ba-435a-a4c7-1f699424e08c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5013572b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 identity=1839 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bdbeb6b0-e7ba-435a-a4c7-1f699424e08c,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bdbeb6b0-e7ba-435a-a4c7-1f699424e08c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jkq2r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5013572b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 identity=1839 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jkq2r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5013572b94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2337 identity=1839 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jkq2r subsys=endpoint level=info msg="Successful endpoint creation" containerID=5013572b94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2337 identity=1839 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jkq2r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5013572b94 endpointID=2337 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-jkq2r subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bdbeb6b0-e7ba-435a-a4c7-1f699424e08c k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=bdbeb6b0-e7ba-435a-a4c7-1f699424e08c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5013572b94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2337 identity=1839 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jkq2r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 facb9fc6-1a8d-450e-8949-fef264668a79 default }" containerID=6b4260da600b6d5f15295e2de0c83a22c71e1255cfdd4ea06803c6bcdb43ff48 datapathConfiguration="&{false false false false false }" interface=lxc9c17599a9b32 k8sPodName=openstack/barbican-ks-user-rtscd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b4260da60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-rtscd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b4260da60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fc24d177-1914-4cf4-b9d9-8ec8e319c7f9,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=fc24d177-1914-4cf4-b9d9-8ec8e319c7f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-rtscd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6b4260da60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-rtscd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=fc24d177-1914-4cf4-b9d9-8ec8e319c7f9;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=fc24d177-1914-4cf4-b9d9-8ec8e319c7f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b4260da60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=63348 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fc24d177-1914-4cf4-b9d9-8ec8e319c7f9,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=fc24d177-1914-4cf4-b9d9-8ec8e319c7f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-rtscd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b4260da60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=63348 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-rtscd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b4260da60 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=16 identity=63348 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-rtscd subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b4260da60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=16 identity=63348 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-rtscd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6b4260da60 endpointID=16 k8sNamespace=openstack k8sPodName=barbican-ks-user-rtscd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=fc24d177-1914-4cf4-b9d9-8ec8e319c7f9 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=fc24d177-1914-4cf4-b9d9-8ec8e319c7f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6b4260da60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=16 identity=63348 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-rtscd subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.99 b12a1025-5f55-4f8f-8dd4-ecd36ec7313a default }" containerID=57deaacc5b8106ebb638bb342f1f52b5d684ae856ae07184cd108c62a60c642f datapathConfiguration="&{false false false false false }" interface=lxc4a0bca6f8fce k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-d9tbd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57deaacc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 ipv4=10.0.0.99 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-d9tbd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57deaacc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.99 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-d9tbd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57deaacc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=9779 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.99 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-d9tbd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57deaacc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=9779 ipv4=10.0.0.99 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-d9tbd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=57deaacc5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1380 identity=9779 ipv4=10.0.0.99 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-d9tbd subsys=endpoint level=info msg="Successful endpoint creation" containerID=57deaacc5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1380 identity=9779 ipv4=10.0.0.99 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-d9tbd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.252 c1b38ae7-763d-4b21-9f54-6dd506d86496 default }" containerID=75a2923d97dfc957894f1298c27b92b9075942f461e55baf7316d975ab5a3821 datapathConfiguration="&{false false false false false }" interface=lxce5f6c4c167ba k8sPodName=openstack/rook-ceph-detect-version-wc7n2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75a2923d97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wc7n2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75a2923d97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=43b0f070-9778-4579-baff-a0742566d440,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=43b0f070-9778-4579-baff-a0742566d440,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wc7n2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=43b0f070-9778-4579-baff-a0742566d440;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=43b0f070-9778-4579-baff-a0742566d440;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75a2923d97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=15018 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=43b0f070-9778-4579-baff-a0742566d440,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=43b0f070-9778-4579-baff-a0742566d440,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wc7n2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75a2923d97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=15018 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wc7n2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75a2923d97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=533 identity=15018 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wc7n2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=75a2923d97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=533 identity=15018 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wc7n2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=75a2923d97 endpointID=533 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-wc7n2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=43b0f070-9778-4579-baff-a0742566d440 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=43b0f070-9778-4579-baff-a0742566d440 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=75a2923d97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=533 identity=15018 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wc7n2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 e4b35bed-877f-457c-a969-bc50eeaadd7c default }" containerID=5cca508ab531742ba04dcc31026a7950eb0f834c4e805065bb9c30e0000f42b0 datapathConfiguration="&{false false false false false }" interface=lxc29fbd7391c73 k8sPodName=local-path-storage/helper-pod-create-pvc-e06480f6-07a4-4814-8e9a-f42963ff3186 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cca508ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3049 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e06480f6-07a4-4814-8e9a-f42963ff3186 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cca508ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e06480f6-07a4-4814-8e9a-f42963ff3186 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cca508ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3049 identity=26515 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e06480f6-07a4-4814-8e9a-f42963ff3186 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cca508ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3049 identity=26515 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e06480f6-07a4-4814-8e9a-f42963ff3186 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5cca508ab5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3049 identity=26515 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e06480f6-07a4-4814-8e9a-f42963ff3186 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cca508ab5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3049 identity=26515 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e06480f6-07a4-4814-8e9a-f42963ff3186 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.209 1f498685-be43-4489-80bc-34e863fe306e default }" containerID=11545e8794d25245b8d01079f40d04a790feed4db14fcd95fbbf12264bf8d264 datapathConfiguration="&{false false false false false }" interface=lxcc2fa73d8feeb k8sPodName=openstack/ceph-object-controller-detect-version-fdzwg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11545e8794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fdzwg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11545e8794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1dee06f0-b9a2-43fa-8470-6f64d0688d42,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1dee06f0-b9a2-43fa-8470-6f64d0688d42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fdzwg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=11545e8794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fdzwg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=1dee06f0-b9a2-43fa-8470-6f64d0688d42;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=1dee06f0-b9a2-43fa-8470-6f64d0688d42;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11545e8794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identity=3694 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1dee06f0-b9a2-43fa-8470-6f64d0688d42,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1dee06f0-b9a2-43fa-8470-6f64d0688d42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fdzwg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11545e8794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identity=3694 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fdzwg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11545e8794 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3990 identity=3694 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fdzwg subsys=endpoint level=info msg="Successful endpoint creation" containerID=11545e8794 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3990 identity=3694 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fdzwg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5cca508ab5 endpointID=3049 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e06480f6-07a4-4814-8e9a-f42963ff3186 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5cca508ab5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3049 identity=26515 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e06480f6-07a4-4814-8e9a-f42963ff3186 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 8d239fa5-38b1-48e9-b353-2bf3c25fef8c default }" containerID=af53744c9b61790fc2813f619cf878f67bf21b3ee79c559aa257752bd142ef05 datapathConfiguration="&{false false false false false }" interface=lxc388e823a7398 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af53744c9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af53744c9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=af53744c9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.40 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af53744c9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=41226 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af53744c9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=41226 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af53744c9b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=397 identity=41226 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af53744c9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=397 identity=41226 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Delete endpoint request" containerID=11545e8794 endpointID=3990 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-fdzwg subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=1dee06f0-b9a2-43fa-8470-6f64d0688d42 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=1dee06f0-b9a2-43fa-8470-6f64d0688d42 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=11545e8794 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3990 identity=3694 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fdzwg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 834e3c29-6aa3-4130-8468-41adfa3ea352 default }" containerID=898a0a26a16ba47c635f04466b5cb89561aaadaa3a8710408f6494ee734a003e datapathConfiguration="&{false false false false false }" interface=lxc24d6ffab77df k8sPodName=openstack/glance-db-init-xm8w9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=898a0a26a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-db-init-xm8w9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=898a0a26a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=442ecef4-e59e-4556-8a6a-13edbf4e2a55,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=442ecef4-e59e-4556-8a6a-13edbf4e2a55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-db-init-xm8w9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=442ecef4-e59e-4556-8a6a-13edbf4e2a55;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=442ecef4-e59e-4556-8a6a-13edbf4e2a55;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=898a0a26a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=24943 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=442ecef4-e59e-4556-8a6a-13edbf4e2a55,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=442ecef4-e59e-4556-8a6a-13edbf4e2a55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-db-init-xm8w9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=898a0a26a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=24943 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-db-init-xm8w9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=898a0a26a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=387 identity=24943 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-db-init-xm8w9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=898a0a26a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=387 identity=24943 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-db-init-xm8w9 subsys=daemon level=info msg="Delete endpoint request" containerID=898a0a26a1 endpointID=387 k8sNamespace=openstack k8sPodName=glance-db-init-xm8w9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=442ecef4-e59e-4556-8a6a-13edbf4e2a55 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=442ecef4-e59e-4556-8a6a-13edbf4e2a55 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=898a0a26a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=387 identity=24943 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-db-init-xm8w9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 f71341ba-89ce-4463-b623-76253141c1a4 default }" containerID=f4cfdb4c1854821a6066f840ed9d9e55803c3bb7be7eea8c83ada5496ea945d1 datapathConfiguration="&{false false false false false }" interface=lxcb232f0001dd2 k8sPodName=openstack/glance-db-sync-xd8tc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4cfdb4c18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-db-sync-xd8tc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4cfdb4c18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=64258eea-4a31-4fb5-b634-fac4d592e240,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=64258eea-4a31-4fb5-b634-fac4d592e240,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-db-sync-xd8tc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=64258eea-4a31-4fb5-b634-fac4d592e240;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=64258eea-4a31-4fb5-b634-fac4d592e240;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4cfdb4c18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identity=16901 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=64258eea-4a31-4fb5-b634-fac4d592e240,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=64258eea-4a31-4fb5-b634-fac4d592e240,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-db-sync-xd8tc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f4cfdb4c18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identity=16901 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-db-sync-xd8tc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4cfdb4c18 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3694 identity=16901 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-db-sync-xd8tc subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4cfdb4c18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3694 identity=16901 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-db-sync-xd8tc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.156 1c71ca1c-8a04-426d-b0e3-3a2bb3df138c default }" containerID=bfa10625022b6c70e65a366737686ff35b4dc5e0d7a8519f453f655c7031fec8 datapathConfiguration="&{false false false false false }" interface=lxce41e60abd566 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bt62g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfa1062502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2909 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bt62g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfa1062502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2909 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bt62g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.128 22cdc330-0798-4a7b-a953-017625c8ad4a default }" containerID=56866dfede1ce1c2fb9f238c5e387a8e62f3deed05a136d3612afe43bdadbc78 datapathConfiguration="&{false false false false false }" interface=lxcd57da113b7cd k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cjw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56866dfede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cjw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56866dfede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cjw subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfa1062502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2909 identity=35100 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bt62g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfa1062502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2909 identity=35100 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bt62g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=56866dfede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cjw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56866dfede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=1305 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cjw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56866dfede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=1305 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cjw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfa1062502 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2909 identity=35100 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bt62g subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfa1062502 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2909 identity=35100 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bt62g subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=56866dfede datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=41 identity=1305 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=56866dfede datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=41 identity=1305 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cjw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f4cfdb4c18 endpointID=3694 k8sNamespace=openstack k8sPodName=glance-db-sync-xd8tc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=64258eea-4a31-4fb5-b634-fac4d592e240 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=64258eea-4a31-4fb5-b634-fac4d592e240 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f4cfdb4c18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3694 identity=16901 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-db-sync-xd8tc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 664b327c-3a6c-4218-8226-2142803b5663 default }" containerID=ecd8d0949c2b25b8140dabdf923599fdebccbe09ae975b46b15931fca94b532f datapathConfiguration="&{false false false false false }" interface=lxc022441d54e89 k8sPodName=openstack/glance-rabbit-init-8z9v4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecd8d0949c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-8z9v4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecd8d0949c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c68da775-b4da-441b-802e-e66a07568e24,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c68da775-b4da-441b-802e-e66a07568e24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-8z9v4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c68da775-b4da-441b-802e-e66a07568e24;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c68da775-b4da-441b-802e-e66a07568e24;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecd8d0949c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 identity=24761 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c68da775-b4da-441b-802e-e66a07568e24,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c68da775-b4da-441b-802e-e66a07568e24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-8z9v4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ecd8d0949c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 identity=24761 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-8z9v4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ecd8d0949c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=150 identity=24761 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-8z9v4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecd8d0949c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=150 identity=24761 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-8z9v4 subsys=daemon level=info msg="Delete endpoint request" containerID=ecd8d0949c endpointID=150 k8sNamespace=openstack k8sPodName=glance-rabbit-init-8z9v4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c68da775-b4da-441b-802e-e66a07568e24 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c68da775-b4da-441b-802e-e66a07568e24 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ecd8d0949c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=150 identity=24761 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-8z9v4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 ac5fa5ea-d8f7-4fcf-bb33-df3b5d5c4324 default }" containerID=0ef18ac3d655989bcb5523ce5e3d0cf900a73bbf50433d1e2716b4b4c25a005a datapathConfiguration="&{false false false false false }" interface=lxc0dc919c72cee k8sPodName=openstack/glance-ks-service-ckqzr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ef18ac3d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-service-ckqzr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ef18ac3d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b20d9f44-fbbc-40dd-b62c-7504799030d0,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b20d9f44-fbbc-40dd-b62c-7504799030d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-service-ckqzr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b20d9f44-fbbc-40dd-b62c-7504799030d0;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=b20d9f44-fbbc-40dd-b62c-7504799030d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ef18ac3d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identity=55284 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b20d9f44-fbbc-40dd-b62c-7504799030d0,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b20d9f44-fbbc-40dd-b62c-7504799030d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-service-ckqzr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ef18ac3d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identity=55284 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-service-ckqzr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ef18ac3d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1649 identity=55284 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-service-ckqzr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ef18ac3d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1649 identity=55284 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-service-ckqzr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ef18ac3d6 endpointID=1649 k8sNamespace=openstack k8sPodName=glance-ks-service-ckqzr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b20d9f44-fbbc-40dd-b62c-7504799030d0 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=b20d9f44-fbbc-40dd-b62c-7504799030d0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0ef18ac3d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1649 identity=55284 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-service-ckqzr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 2f1f9e13-4e72-4def-a534-81883d940f01 default }" containerID=a14d5d060ed03ce017fb215274506e67a45605b0b47715fbf6313dfd60d7998f datapathConfiguration="&{false false false false false }" interface=lxc67c28ccdb973 k8sPodName=openstack/glance-ks-endpoints-qmfp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a14d5d060e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-qmfp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a14d5d060e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d11efac6-4ffa-4abf-8eee-e36abbe1a681,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d11efac6-4ffa-4abf-8eee-e36abbe1a681,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-qmfp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d11efac6-4ffa-4abf-8eee-e36abbe1a681;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=d11efac6-4ffa-4abf-8eee-e36abbe1a681;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a14d5d060e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=13438 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d11efac6-4ffa-4abf-8eee-e36abbe1a681,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d11efac6-4ffa-4abf-8eee-e36abbe1a681,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-qmfp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a14d5d060e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=13438 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-qmfp7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a14d5d060e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=164 identity=13438 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-qmfp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a14d5d060e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=164 identity=13438 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-qmfp7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a14d5d060e endpointID=164 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-qmfp7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d11efac6-4ffa-4abf-8eee-e36abbe1a681 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=d11efac6-4ffa-4abf-8eee-e36abbe1a681 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a14d5d060e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=164 identity=13438 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-qmfp7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 ef47d2ba-e79c-4f3d-9a9c-24269565dec1 default }" containerID=2db84257219e066d4cae85df69e3ab9b09d11a7bb04fb647248f3a987969343e datapathConfiguration="&{false false false false false }" interface=lxce935e7ea11c7 k8sPodName=openstack/glance-ks-user-7mwx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2db8425721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-7mwx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2db8425721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f991ee22-ec87-401e-80b9-cdb7c91d6ded,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f991ee22-ec87-401e-80b9-cdb7c91d6ded,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-7mwx8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f991ee22-ec87-401e-80b9-cdb7c91d6ded;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=f991ee22-ec87-401e-80b9-cdb7c91d6ded;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2db8425721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identity=24795 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f991ee22-ec87-401e-80b9-cdb7c91d6ded,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f991ee22-ec87-401e-80b9-cdb7c91d6ded,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-7mwx8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2db8425721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identity=24795 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-7mwx8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2db8425721 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2766 identity=24795 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-7mwx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2db8425721 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2766 identity=24795 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-7mwx8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2db8425721 endpointID=2766 k8sNamespace=openstack k8sPodName=glance-ks-user-7mwx8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f991ee22-ec87-401e-80b9-cdb7c91d6ded k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=f991ee22-ec87-401e-80b9-cdb7c91d6ded k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2db8425721 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2766 identity=24795 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-7mwx8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 eefd5703-6a8d-4926-a4cd-860d96ad1716 default }" containerID=1e7fe632120659bbeabda24bf05ac58e93e13e2ca0fe13c1e1327c402d9ac9f6 datapathConfiguration="&{false false false false false }" interface=lxcd5f2568ec985 k8sPodName=openstack/glance-metadefs-load-dqtmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e7fe63212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=402 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-dqtmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e7fe63212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=402 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=73f961a6-e88e-443f-a9b9-bd0a6768cbc4,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=73f961a6-e88e-443f-a9b9-bd0a6768cbc4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-dqtmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1e7fe63212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=402 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-dqtmh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=73f961a6-e88e-443f-a9b9-bd0a6768cbc4;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=73f961a6-e88e-443f-a9b9-bd0a6768cbc4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e7fe63212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=402 identity=10148 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=73f961a6-e88e-443f-a9b9-bd0a6768cbc4,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=73f961a6-e88e-443f-a9b9-bd0a6768cbc4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-dqtmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e7fe63212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=402 identity=10148 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-dqtmh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e7fe63212 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=402 identity=10148 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-dqtmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e7fe63212 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=402 identity=10148 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-dqtmh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e7fe63212 endpointID=402 k8sNamespace=openstack k8sPodName=glance-metadefs-load-dqtmh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=73f961a6-e88e-443f-a9b9-bd0a6768cbc4 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=73f961a6-e88e-443f-a9b9-bd0a6768cbc4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1e7fe63212 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=402 identity=10148 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-dqtmh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 b0e37d10-e9a2-4b1e-90b7-08bdf10b5689 default }" containerID=b70e6944ca35d2f704ce2f3ce42e922fbf79ec6d500f53aa5008c1bad63389c5 datapathConfiguration="&{false false false false false }" interface=lxc1208df976615 k8sPodName=openstack/glance-storage-init-k8kv5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b70e6944ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-storage-init-k8kv5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b70e6944ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=97284a8d-b7a6-41f1-8de5-2a0cb2bd31dd,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=97284a8d-b7a6-41f1-8de5-2a0cb2bd31dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-storage-init-k8kv5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=97284a8d-b7a6-41f1-8de5-2a0cb2bd31dd;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=97284a8d-b7a6-41f1-8de5-2a0cb2bd31dd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b70e6944ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identity=36318 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=97284a8d-b7a6-41f1-8de5-2a0cb2bd31dd,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=97284a8d-b7a6-41f1-8de5-2a0cb2bd31dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-storage-init-k8kv5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b70e6944ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identity=36318 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-storage-init-k8kv5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b70e6944ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2386 identity=36318 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-storage-init-k8kv5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b70e6944ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2386 identity=36318 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-storage-init-k8kv5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b70e6944ca endpointID=2386 k8sNamespace=openstack k8sPodName=glance-storage-init-k8kv5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=97284a8d-b7a6-41f1-8de5-2a0cb2bd31dd k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=97284a8d-b7a6-41f1-8de5-2a0cb2bd31dd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b70e6944ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2386 identity=36318 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-storage-init-k8kv5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 fdb2a7e5-fcb4-4ea3-8771-43bf729c59b2 default }" containerID=1267b5ef36ddbfe938d127cc1c8bc3107e260cd2ab8de57b359548b5b34433a8 datapathConfiguration="&{false false false false false }" interface=lxc1b98ac15d906 k8sPodName=openstack/glance-api-5998c955f4-h7ggj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1267b5ef36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-api-5998c955f4-h7ggj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1267b5ef36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-api-5998c955f4-h7ggj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1267b5ef36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identity=42155 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-api-5998c955f4-h7ggj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1267b5ef36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identity=42155 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-api-5998c955f4-h7ggj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1267b5ef36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2251 identity=42155 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-api-5998c955f4-h7ggj subsys=endpoint level=info msg="Successful endpoint creation" containerID=1267b5ef36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2251 identity=42155 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-api-5998c955f4-h7ggj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.81 7e6a3c96-772b-4cb0-bcd3-c01da38b9b3a default }" containerID=43296a8c834052eda094018a7241895f82cdf1de87756fbcb89fcd54e9762145 datapathConfiguration="&{false false false false false }" interface=lxc277a640e7ec1 k8sPodName=openstack/staffeln-conductor-54c45f87f6-h89cm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43296a8c83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/staffeln-conductor-54c45f87f6-h89cm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43296a8c83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/staffeln-conductor-54c45f87f6-h89cm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=43296a8c83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=openstack/staffeln-conductor-54c45f87f6-h89cm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43296a8c83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identity=15365 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/staffeln-conductor-54c45f87f6-h89cm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43296a8c83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identity=15365 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/staffeln-conductor-54c45f87f6-h89cm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 241e38eb-d97d-49d2-bbb6-50d1eb01ceae default }" containerID=4257823056572a5a1363e81da5f960886db2f72583491899596a783c3dcb6c0b datapathConfiguration="&{false false false false false }" interface=lxcc32949f8f37e k8sPodName=openstack/staffeln-api-5c9dfbf667-8rv96 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4257823056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/staffeln-api-5c9dfbf667-8rv96 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4257823056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/staffeln-api-5c9dfbf667-8rv96 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4257823056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identity=47069 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/staffeln-api-5c9dfbf667-8rv96 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4257823056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identity=47069 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/staffeln-api-5c9dfbf667-8rv96 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43296a8c83 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1084 identity=15365 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/staffeln-conductor-54c45f87f6-h89cm subsys=endpoint level=info msg="Successful endpoint creation" containerID=43296a8c83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1084 identity=15365 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/staffeln-conductor-54c45f87f6-h89cm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.72 0832db2e-0905-446f-860e-edb788509157 default }" containerID=23a9f8b685589bace74cb0c109099e9fd34ad3f4d4cd8aa5d8596431896f747f datapathConfiguration="&{false false false false false }" interface=lxc74ac19420697 k8sPodName=openstack/staffeln-db-init-rmv2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23a9f8b685 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-db-init-rmv2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23a9f8b685 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8e2fd25c-fa37-41d4-9bf2-406fcbaa97a0,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8e2fd25c-fa37-41d4-9bf2-406fcbaa97a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-db-init-rmv2h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=8e2fd25c-fa37-41d4-9bf2-406fcbaa97a0;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=8e2fd25c-fa37-41d4-9bf2-406fcbaa97a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23a9f8b685 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 identity=11404 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8e2fd25c-fa37-41d4-9bf2-406fcbaa97a0,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8e2fd25c-fa37-41d4-9bf2-406fcbaa97a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-db-init-rmv2h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23a9f8b685 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 identity=11404 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-db-init-rmv2h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4257823056 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3488 identity=47069 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/staffeln-api-5c9dfbf667-8rv96 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4257823056 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3488 identity=47069 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/staffeln-api-5c9dfbf667-8rv96 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=23a9f8b685 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=325 identity=11404 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-db-init-rmv2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=23a9f8b685 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=325 identity=11404 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-db-init-rmv2h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=23a9f8b685 endpointID=325 k8sNamespace=openstack k8sPodName=staffeln-db-init-rmv2h subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=8e2fd25c-fa37-41d4-9bf2-406fcbaa97a0 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=8e2fd25c-fa37-41d4-9bf2-406fcbaa97a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=23a9f8b685 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=325 identity=11404 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-db-init-rmv2h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 623543a5-2785-4377-ba05-fad39fae586d default }" containerID=8ed2a568c8be9142ea4faef1642480529de268ca9869fd971ffe06325b8c0c98 datapathConfiguration="&{false false false false false }" interface=lxc4b518cd16b68 k8sPodName=openstack/staffeln-db-sync-xrpt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ed2a568c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4031 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/staffeln-db-sync-xrpt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ed2a568c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4031 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0dd30fe8-1dd8-4d68-932c-99a48e9e2c10,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0dd30fe8-1dd8-4d68-932c-99a48e9e2c10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/staffeln-db-sync-xrpt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=0dd30fe8-1dd8-4d68-932c-99a48e9e2c10;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=0dd30fe8-1dd8-4d68-932c-99a48e9e2c10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ed2a568c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4031 identity=5553 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0dd30fe8-1dd8-4d68-932c-99a48e9e2c10,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0dd30fe8-1dd8-4d68-932c-99a48e9e2c10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/staffeln-db-sync-xrpt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ed2a568c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4031 identity=5553 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/staffeln-db-sync-xrpt7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8ed2a568c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4031 identity=5553 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/staffeln-db-sync-xrpt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ed2a568c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4031 identity=5553 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/staffeln-db-sync-xrpt7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ed2a568c8 endpointID=4031 k8sNamespace=openstack k8sPodName=staffeln-db-sync-xrpt7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=0dd30fe8-1dd8-4d68-932c-99a48e9e2c10 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=0dd30fe8-1dd8-4d68-932c-99a48e9e2c10 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=8ed2a568c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4031 identity=5553 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/staffeln-db-sync-xrpt7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 e98dfe4f-7e75-4d4c-8093-597f5456036e default }" containerID=4680f8b60d946f8f21d60aff2dc1142ade4a10dae9a600300dbd43350ca0a4e9 datapathConfiguration="&{false false false false false }" interface=lxc60e8dff32666 k8sPodName=local-path-storage/helper-pod-create-pvc-2fd3aa05-fc56-4f21-bdda-8f6bfd66502f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4680f8b60d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2fd3aa05-fc56-4f21-bdda-8f6bfd66502f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4680f8b60d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2fd3aa05-fc56-4f21-bdda-8f6bfd66502f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4680f8b60d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 identity=26515 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2fd3aa05-fc56-4f21-bdda-8f6bfd66502f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4680f8b60d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 identity=26515 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2fd3aa05-fc56-4f21-bdda-8f6bfd66502f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4680f8b60d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=831 identity=26515 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2fd3aa05-fc56-4f21-bdda-8f6bfd66502f subsys=endpoint level=info msg="Successful endpoint creation" containerID=4680f8b60d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=831 identity=26515 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2fd3aa05-fc56-4f21-bdda-8f6bfd66502f subsys=daemon level=info msg="Delete endpoint request" containerID=4680f8b60d endpointID=831 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2fd3aa05-fc56-4f21-bdda-8f6bfd66502f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4680f8b60d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=831 identity=26515 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2fd3aa05-fc56-4f21-bdda-8f6bfd66502f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 6448fb37-5e17-4902-9896-d10c1d1881eb default }" containerID=406de94fd4681099c969d5207d8498c74be1423d21634e4ca613829efb701c0a datapathConfiguration="&{false false false false false }" interface=lxc0b6a137c0445 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=406de94fd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=406de94fd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=406de94fd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 identity=29483 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=406de94fd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 identity=29483 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=406de94fd4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1977 identity=29483 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=406de94fd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1977 identity=29483 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.43 bd12d359-cd99-4274-906a-897997efb2c1 default }" containerID=27fcc95c376000ea9767065d8ca9213523f0fb497740626c1965c69aa7750a66 datapathConfiguration="&{false false false false false }" interface=lxcbc1962aca8f6 k8sPodName=openstack/cinder-scheduler-7bcd6fc448-xbkrn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27fcc95c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-scheduler-7bcd6fc448-xbkrn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27fcc95c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-scheduler-7bcd6fc448-xbkrn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27fcc95c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=62644 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-scheduler-7bcd6fc448-xbkrn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27fcc95c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=62644 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-scheduler-7bcd6fc448-xbkrn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 81a3e1df-f0ee-4c08-85fd-e90c9ea3852e default }" containerID=a33dd8336623bfaaa6301c10f6c41d9f3385aa76ddcbdd87a0663bfcc40f518b datapathConfiguration="&{false false false false false }" interface=lxc80abf67fef08 k8sPodName=openstack/cinder-api-748f66cddd-jpgw7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a33dd83366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1511 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-api-748f66cddd-jpgw7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a33dd83366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1511 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-api-748f66cddd-jpgw7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a33dd83366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1511 identity=4864 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-api-748f66cddd-jpgw7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a33dd83366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1511 identity=4864 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-api-748f66cddd-jpgw7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27fcc95c37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=551 identity=62644 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-scheduler-7bcd6fc448-xbkrn subsys=endpoint level=info msg="Successful endpoint creation" containerID=27fcc95c37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=551 identity=62644 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-scheduler-7bcd6fc448-xbkrn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 a15458bc-74dc-4036-8b62-7b6584a48e12 default }" containerID=000312318a129bbccb1e66dba88e94255bd0bbc39a0c4193d2435486672947e0 datapathConfiguration="&{false false false false false }" interface=lxcef1706f187d8 k8sPodName=openstack/cinder-db-init-8bgw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=000312318a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-db-init-8bgw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=000312318a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7edd8454-6f5f-4035-bb02-9cf25531fa42,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=7edd8454-6f5f-4035-bb02-9cf25531fa42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-db-init-8bgw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=7edd8454-6f5f-4035-bb02-9cf25531fa42;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=7edd8454-6f5f-4035-bb02-9cf25531fa42;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=000312318a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=33596 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7edd8454-6f5f-4035-bb02-9cf25531fa42,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=7edd8454-6f5f-4035-bb02-9cf25531fa42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-db-init-8bgw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=000312318a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=33596 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-db-init-8bgw4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a33dd83366 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1511 identity=4864 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-api-748f66cddd-jpgw7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a33dd83366 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1511 identity=4864 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/cinder-api-748f66cddd-jpgw7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=000312318a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1039 identity=33596 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-db-init-8bgw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=000312318a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1039 identity=33596 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-db-init-8bgw4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=000312318a endpointID=1039 k8sNamespace=openstack k8sPodName=cinder-db-init-8bgw4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=7edd8454-6f5f-4035-bb02-9cf25531fa42 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=7edd8454-6f5f-4035-bb02-9cf25531fa42 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=000312318a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1039 identity=33596 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-db-init-8bgw4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 9ae59e5e-8563-4398-9962-19dcbb5d1f7e default }" containerID=03f4c70d02492c490a910f96de7b4c2186eba799fea363474c592f419bb67a70 datapathConfiguration="&{false false false false false }" interface=lxca22d2e53e35b k8sPodName=openstack/cinder-db-sync-2pvsd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03f4c70d02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-db-sync-2pvsd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03f4c70d02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1462caf9-8666-40c7-9f14-2c90a7dea5cd,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=1462caf9-8666-40c7-9f14-2c90a7dea5cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-db-sync-2pvsd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1462caf9-8666-40c7-9f14-2c90a7dea5cd;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=1462caf9-8666-40c7-9f14-2c90a7dea5cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03f4c70d02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 identity=13102 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1462caf9-8666-40c7-9f14-2c90a7dea5cd,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=1462caf9-8666-40c7-9f14-2c90a7dea5cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-db-sync-2pvsd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03f4c70d02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 identity=13102 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-db-sync-2pvsd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=03f4c70d02 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3887 identity=13102 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-db-sync-2pvsd subsys=endpoint level=info msg="Successful endpoint creation" containerID=03f4c70d02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3887 identity=13102 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-db-sync-2pvsd subsys=daemon level=info msg="Delete endpoint request" containerID=03f4c70d02 endpointID=3887 k8sNamespace=openstack k8sPodName=cinder-db-sync-2pvsd subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1462caf9-8666-40c7-9f14-2c90a7dea5cd k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=1462caf9-8666-40c7-9f14-2c90a7dea5cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=03f4c70d02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3887 identity=13102 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-db-sync-2pvsd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 3c768bc0-8992-42bc-b7e2-703ae1df64e1 default }" containerID=f5f7b27e9145253906aba676fb6073eae37e49f15262b0c2104e8cadd3ae227c datapathConfiguration="&{false false false false false }" interface=lxc257d2ad91e60 k8sPodName=openstack/cinder-rabbit-init-6fzf6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5f7b27e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/cinder-rabbit-init-6fzf6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5f7b27e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=38d22bc5-b847-4c48-8a72-a609586d2a5f,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=38d22bc5-b847-4c48-8a72-a609586d2a5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/cinder-rabbit-init-6fzf6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=38d22bc5-b847-4c48-8a72-a609586d2a5f;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=38d22bc5-b847-4c48-8a72-a609586d2a5f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5f7b27e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identity=61556 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=38d22bc5-b847-4c48-8a72-a609586d2a5f,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=38d22bc5-b847-4c48-8a72-a609586d2a5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/cinder-rabbit-init-6fzf6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f5f7b27e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identity=61556 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/cinder-rabbit-init-6fzf6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5f7b27e91 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1718 identity=61556 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/cinder-rabbit-init-6fzf6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5f7b27e91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1718 identity=61556 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/cinder-rabbit-init-6fzf6 subsys=daemon level=info msg="Delete endpoint request" containerID=f5f7b27e91 endpointID=1718 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-6fzf6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=38d22bc5-b847-4c48-8a72-a609586d2a5f k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=38d22bc5-b847-4c48-8a72-a609586d2a5f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f5f7b27e91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1718 identity=61556 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/cinder-rabbit-init-6fzf6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 76411f79-2c14-4a1e-9d09-f3501304499b default }" containerID=d62f063b32bab22fba1aae67625c652ec179b811be7d35821b53baa5e7532299 datapathConfiguration="&{false false false false false }" interface=lxc45829ac8fc13 k8sPodName=openstack/cinder-ks-service-6ljmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d62f063b32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-ks-service-6ljmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d62f063b32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ca0ae2e5-7d03-4f0c-9f68-81354af4ccf7,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=ca0ae2e5-7d03-4f0c-9f68-81354af4ccf7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-ks-service-6ljmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ca0ae2e5-7d03-4f0c-9f68-81354af4ccf7;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=ca0ae2e5-7d03-4f0c-9f68-81354af4ccf7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d62f063b32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=16933 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ca0ae2e5-7d03-4f0c-9f68-81354af4ccf7,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=ca0ae2e5-7d03-4f0c-9f68-81354af4ccf7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-ks-service-6ljmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d62f063b32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=16933 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-ks-service-6ljmc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d62f063b32 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=52 identity=16933 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-ks-service-6ljmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d62f063b32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=52 identity=16933 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-ks-service-6ljmc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d62f063b32 endpointID=52 k8sNamespace=openstack k8sPodName=cinder-ks-service-6ljmc subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ca0ae2e5-7d03-4f0c-9f68-81354af4ccf7 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=ca0ae2e5-7d03-4f0c-9f68-81354af4ccf7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d62f063b32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=52 identity=16933 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-ks-service-6ljmc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 eba05aac-e6a2-476f-9e26-1bbf92fbf68c default }" containerID=52843953e31d4d7ccdb7fd94ede0cd181c494f487241212d287a262eabf3306e datapathConfiguration="&{false false false false false }" interface=lxcc3fa240d8762 k8sPodName=openstack/cinder-ks-endpoints-fgh9g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52843953e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-ks-endpoints-fgh9g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52843953e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0a609446-f9df-462b-8c6f-5b4db236cf38,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0a609446-f9df-462b-8c6f-5b4db236cf38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-ks-endpoints-fgh9g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=0a609446-f9df-462b-8c6f-5b4db236cf38;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0a609446-f9df-462b-8c6f-5b4db236cf38;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=52843953e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-ks-endpoints-fgh9g line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=52843953e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=23728 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0a609446-f9df-462b-8c6f-5b4db236cf38,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0a609446-f9df-462b-8c6f-5b4db236cf38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-ks-endpoints-fgh9g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52843953e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=23728 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-ks-endpoints-fgh9g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52843953e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=264 identity=23728 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-ks-endpoints-fgh9g subsys=endpoint level=info msg="Successful endpoint creation" containerID=52843953e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=264 identity=23728 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-ks-endpoints-fgh9g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=52843953e3 endpointID=264 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-fgh9g subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=0a609446-f9df-462b-8c6f-5b4db236cf38 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0a609446-f9df-462b-8c6f-5b4db236cf38 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=52843953e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=264 identity=23728 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/cinder-ks-endpoints-fgh9g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 e9f67d50-ee4b-449c-a1cc-4113660cfbb2 default }" containerID=f6e2c46d771dfc18b804319b504642c1b657c020dcedf47c44aac1a8bb536517 datapathConfiguration="&{false false false false false }" interface=lxc59ddfbb4a4d8 k8sPodName=openstack/cinder-ks-user-jrfdv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6e2c46d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/cinder-ks-user-jrfdv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6e2c46d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e44fbdcc-6322-4993-9e58-15af1925b2db,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=e44fbdcc-6322-4993-9e58-15af1925b2db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/cinder-ks-user-jrfdv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e44fbdcc-6322-4993-9e58-15af1925b2db;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=e44fbdcc-6322-4993-9e58-15af1925b2db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6e2c46d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identity=18815 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e44fbdcc-6322-4993-9e58-15af1925b2db,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=e44fbdcc-6322-4993-9e58-15af1925b2db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/cinder-ks-user-jrfdv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6e2c46d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identity=18815 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/cinder-ks-user-jrfdv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f6e2c46d77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1297 identity=18815 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/cinder-ks-user-jrfdv subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6e2c46d77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1297 identity=18815 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/cinder-ks-user-jrfdv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6e2c46d77 endpointID=1297 k8sNamespace=openstack k8sPodName=cinder-ks-user-jrfdv subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e44fbdcc-6322-4993-9e58-15af1925b2db k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=e44fbdcc-6322-4993-9e58-15af1925b2db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f6e2c46d77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1297 identity=18815 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/cinder-ks-user-jrfdv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 7049323b-5e25-44d4-b8ca-3dea74306bf3 default }" containerID=78b81493c4eff25f8036b9864d5d5acd38d03523f947ab71275c07e2adc3044e datapathConfiguration="&{false false false false false }" interface=lxc79222cdbcefa k8sPodName=openstack/cinder-backup-storage-init-bpl47 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78b81493c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-backup-storage-init-bpl47 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78b81493c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=84cfab7b-2289-4257-abcb-aa6a47c92949,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=84cfab7b-2289-4257-abcb-aa6a47c92949,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-backup-storage-init-bpl47 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=84cfab7b-2289-4257-abcb-aa6a47c92949;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=84cfab7b-2289-4257-abcb-aa6a47c92949;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78b81493c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 identity=11240 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=84cfab7b-2289-4257-abcb-aa6a47c92949,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=84cfab7b-2289-4257-abcb-aa6a47c92949,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-backup-storage-init-bpl47 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78b81493c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 identity=11240 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-backup-storage-init-bpl47 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=78b81493c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=581 identity=11240 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-backup-storage-init-bpl47 subsys=endpoint level=info msg="Successful endpoint creation" containerID=78b81493c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=581 identity=11240 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-backup-storage-init-bpl47 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=78b81493c4 endpointID=581 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-bpl47 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=84cfab7b-2289-4257-abcb-aa6a47c92949 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=84cfab7b-2289-4257-abcb-aa6a47c92949 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=78b81493c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=581 identity=11240 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-backup-storage-init-bpl47 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 b0fa958c-1a52-4333-b944-45940503e8e5 default }" containerID=bd2cffef4c4140ff10eb7b2a4cfefa5e0b84e9816720e6f0d92ecbf17b5a48bf datapathConfiguration="&{false false false false false }" interface=lxca38ede5d7937 k8sPodName=openstack/cinder-create-internal-tenant-9vxsp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd2cffef4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2509 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9vxsp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd2cffef4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2509 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=28b258cc-46fd-4a1b-ba16-05d12b15af08,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=28b258cc-46fd-4a1b-ba16-05d12b15af08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9vxsp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bd2cffef4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2509 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9vxsp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=28b258cc-46fd-4a1b-ba16-05d12b15af08;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=28b258cc-46fd-4a1b-ba16-05d12b15af08;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd2cffef4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2509 identity=4950 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=28b258cc-46fd-4a1b-ba16-05d12b15af08,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=28b258cc-46fd-4a1b-ba16-05d12b15af08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9vxsp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd2cffef4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2509 identity=4950 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9vxsp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd2cffef4c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2509 identity=4950 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9vxsp subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd2cffef4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2509 identity=4950 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9vxsp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd2cffef4c endpointID=2509 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-9vxsp subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=28b258cc-46fd-4a1b-ba16-05d12b15af08 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=28b258cc-46fd-4a1b-ba16-05d12b15af08 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=bd2cffef4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2509 identity=4950 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-9vxsp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 f892e6df-17e0-46dd-93c6-f982ad21254a default }" containerID=faedf2456027051206ae902913c05c4903aca609a151e49848e0bb2f76f5ba12 datapathConfiguration="&{false false false false false }" interface=lxc245c5075a6f9 k8sPodName=openstack/cinder-storage-init-96lll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=faedf24560 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/cinder-storage-init-96lll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=faedf24560 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=fb11f851-2c2e-4a82-8f90-28e37e6281ef,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=fb11f851-2c2e-4a82-8f90-28e37e6281ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/cinder-storage-init-96lll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=fb11f851-2c2e-4a82-8f90-28e37e6281ef;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=fb11f851-2c2e-4a82-8f90-28e37e6281ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=faedf24560 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identity=17524 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=fb11f851-2c2e-4a82-8f90-28e37e6281ef,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=fb11f851-2c2e-4a82-8f90-28e37e6281ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/cinder-storage-init-96lll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=faedf24560 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identity=17524 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/cinder-storage-init-96lll subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=faedf24560 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3001 identity=17524 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/cinder-storage-init-96lll subsys=endpoint level=info msg="Successful endpoint creation" containerID=faedf24560 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3001 identity=17524 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/cinder-storage-init-96lll subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=faedf24560 endpointID=3001 k8sNamespace=openstack k8sPodName=cinder-storage-init-96lll subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=fb11f851-2c2e-4a82-8f90-28e37e6281ef k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=fb11f851-2c2e-4a82-8f90-28e37e6281ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=faedf24560 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3001 identity=17524 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/cinder-storage-init-96lll subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 60fb77b3-b7c5-41ff-a5db-6b2a3552ea1a default }" containerID=e85ce41e5b0e5e32719dfc97945014e05aa4707aef736719cdbd6768004a2ae3 datapathConfiguration="&{false false false false false }" interface=lxc82814e07a2e3 k8sPodName=openstack/cinder-bootstrap-djlqr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e85ce41e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3241 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-bootstrap-djlqr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e85ce41e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3241 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ba3deaeb-deba-4fda-9fd0-3c4675e88c40,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ba3deaeb-deba-4fda-9fd0-3c4675e88c40,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-bootstrap-djlqr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ba3deaeb-deba-4fda-9fd0-3c4675e88c40;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=ba3deaeb-deba-4fda-9fd0-3c4675e88c40;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e85ce41e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3241 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-bootstrap-djlqr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e85ce41e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3241 identity=696 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ba3deaeb-deba-4fda-9fd0-3c4675e88c40,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ba3deaeb-deba-4fda-9fd0-3c4675e88c40,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-bootstrap-djlqr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e85ce41e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3241 identity=696 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-bootstrap-djlqr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e85ce41e5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3241 identity=696 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-bootstrap-djlqr subsys=endpoint level=info msg="Successful endpoint creation" containerID=e85ce41e5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3241 identity=696 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-bootstrap-djlqr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 953d35ee-8691-42cd-aac5-444183028467 default }" containerID=57acddbf171ee1271567ed89e0075691348dad008bdb3c711354a2682c634cc5 datapathConfiguration="&{false false false false false }" interface=lxca1b1f7481548 k8sPodName=openstack/cinder-backup-7c976f5486-6mtd8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57acddbf17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/cinder-backup-7c976f5486-6mtd8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57acddbf17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/cinder-backup-7c976f5486-6mtd8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57acddbf17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=50848 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/cinder-backup-7c976f5486-6mtd8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57acddbf17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=50848 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/cinder-backup-7c976f5486-6mtd8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 5516bcc7-0c6b-48c0-aab1-1ce97263729c default }" containerID=1025d3e0804e0146564382123da383935813754ee9d62578a6ba1ba48ffeaf7e datapathConfiguration="&{false false false false false }" interface=lxc1428cafce796 k8sPodName=openstack/cinder-volume-c57c5c784-kf2h6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1025d3e080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3326 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-volume-c57c5c784-kf2h6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1025d3e080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3326 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-volume-c57c5c784-kf2h6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1025d3e080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3326 identity=52330 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-volume-c57c5c784-kf2h6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1025d3e080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3326 identity=52330 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-volume-c57c5c784-kf2h6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57acddbf17 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=880 identity=50848 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/cinder-backup-7c976f5486-6mtd8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=57acddbf17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=880 identity=50848 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/cinder-backup-7c976f5486-6mtd8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1025d3e080 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3326 identity=52330 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-volume-c57c5c784-kf2h6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1025d3e080 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3326 identity=52330 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-volume-c57c5c784-kf2h6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e85ce41e5b endpointID=3241 k8sNamespace=openstack k8sPodName=cinder-bootstrap-djlqr subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ba3deaeb-deba-4fda-9fd0-3c4675e88c40 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=ba3deaeb-deba-4fda-9fd0-3c4675e88c40 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e85ce41e5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3241 identity=696 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-bootstrap-djlqr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 c8dc6191-b8b4-4f1e-99d5-a7f754985832 default }" containerID=6c2a389b056d5ef074cd6568b9a2dd3122885582d1c0b03568b8349a9c4f5f08 datapathConfiguration="&{false false false false false }" interface=lxc138c555993c6 k8sPodName=openstack/placement-api-7fc9d7d55f-wxl8v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c2a389b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-api-7fc9d7d55f-wxl8v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c2a389b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-api-7fc9d7d55f-wxl8v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c2a389b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identity=7816 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-api-7fc9d7d55f-wxl8v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c2a389b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identity=7816 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-api-7fc9d7d55f-wxl8v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.57 94dfbe7e-9307-4e3d-b2fc-6b85a0adca53 default }" containerID=48fe835f4f58f09c38e9ab43a7e4029bedc45c16cfc8bb6914e9b2a92fca2bea datapathConfiguration="&{false false false false false }" interface=lxc376bf35e7c90 k8sPodName=openstack/placement-db-init-lr6vr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48fe835f4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2240 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-init-lr6vr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48fe835f4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2240 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=9a85b5ac-f3a0-499f-b4e2-cce59fe49c05,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=9a85b5ac-f3a0-499f-b4e2-cce59fe49c05,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-init-lr6vr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=9a85b5ac-f3a0-499f-b4e2-cce59fe49c05;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=9a85b5ac-f3a0-499f-b4e2-cce59fe49c05;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48fe835f4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2240 identity=10106 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=9a85b5ac-f3a0-499f-b4e2-cce59fe49c05,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=9a85b5ac-f3a0-499f-b4e2-cce59fe49c05,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-init-lr6vr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48fe835f4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2240 identity=10106 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-init-lr6vr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c2a389b05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4013 identity=7816 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-api-7fc9d7d55f-wxl8v subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c2a389b05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4013 identity=7816 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-api-7fc9d7d55f-wxl8v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=48fe835f4f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2240 identity=10106 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-init-lr6vr subsys=endpoint level=info msg="Successful endpoint creation" containerID=48fe835f4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2240 identity=10106 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-init-lr6vr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48fe835f4f endpointID=2240 k8sNamespace=openstack k8sPodName=placement-db-init-lr6vr subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=9a85b5ac-f3a0-499f-b4e2-cce59fe49c05 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=9a85b5ac-f3a0-499f-b4e2-cce59fe49c05 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=48fe835f4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2240 identity=10106 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-db-init-lr6vr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 16d2ed78-4856-4ced-be1f-4fb656871578 default }" containerID=3aa4cd84fc1fd8a508adf09b16e6c4484ec7a3128d19f415332df5e55b28b5c1 datapathConfiguration="&{false false false false false }" interface=lxc90a1054c6a12 k8sPodName=openstack/placement-db-sync-cgttg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3aa4cd84fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/placement-db-sync-cgttg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3aa4cd84fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=5f6b107d-6270-407a-97c6-54c3b3dde640,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=5f6b107d-6270-407a-97c6-54c3b3dde640,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/placement-db-sync-cgttg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=5f6b107d-6270-407a-97c6-54c3b3dde640;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=5f6b107d-6270-407a-97c6-54c3b3dde640;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3aa4cd84fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identity=3198 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=5f6b107d-6270-407a-97c6-54c3b3dde640,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=5f6b107d-6270-407a-97c6-54c3b3dde640,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/placement-db-sync-cgttg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3aa4cd84fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identity=3198 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/placement-db-sync-cgttg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3aa4cd84fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3902 identity=3198 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/placement-db-sync-cgttg subsys=endpoint level=info msg="Successful endpoint creation" containerID=3aa4cd84fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3902 identity=3198 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/placement-db-sync-cgttg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3aa4cd84fc endpointID=3902 k8sNamespace=openstack k8sPodName=placement-db-sync-cgttg subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=5f6b107d-6270-407a-97c6-54c3b3dde640 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=5f6b107d-6270-407a-97c6-54c3b3dde640 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=3aa4cd84fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3902 identity=3198 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/placement-db-sync-cgttg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 963dd455-5651-486e-9603-9b029ecd2eb7 default }" containerID=b3b7c6da88ba2ab19781067348a2c948d8cd98361e20f7f4d6a8ff1002749487 datapathConfiguration="&{false false false false false }" interface=lxc99c1d7087152 k8sPodName=openstack/placement-ks-service-qfzpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3b7c6da88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=377 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-service-qfzpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3b7c6da88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=377 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e8335464-96a8-4239-808a-a7b373abfd0c,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=e8335464-96a8-4239-808a-a7b373abfd0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-service-qfzpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=e8335464-96a8-4239-808a-a7b373abfd0c;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=e8335464-96a8-4239-808a-a7b373abfd0c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3b7c6da88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=377 identity=19770 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e8335464-96a8-4239-808a-a7b373abfd0c,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=e8335464-96a8-4239-808a-a7b373abfd0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-service-qfzpv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b3b7c6da88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=377 identity=19770 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-service-qfzpv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3b7c6da88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=377 identity=19770 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-service-qfzpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3b7c6da88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=377 identity=19770 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-service-qfzpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b3b7c6da88 endpointID=377 k8sNamespace=openstack k8sPodName=placement-ks-service-qfzpv subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=e8335464-96a8-4239-808a-a7b373abfd0c k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=e8335464-96a8-4239-808a-a7b373abfd0c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=b3b7c6da88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=377 identity=19770 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/placement-ks-service-qfzpv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 d21c326b-e95f-49a3-9b9f-bf144617556f default }" containerID=cbcfd5245b2630a86d4c45b647f9c82c85b34cc67d84f0cef07043b473397fdc datapathConfiguration="&{false false false false false }" interface=lxcde31ff79f766 k8sPodName=openstack/placement-ks-user-5j8ct labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbcfd5245b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-5j8ct subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbcfd5245b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=807384ce-3af1-410b-87c9-49c2f48f6fcd,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=807384ce-3af1-410b-87c9-49c2f48f6fcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-5j8ct subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=807384ce-3af1-410b-87c9-49c2f48f6fcd;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=807384ce-3af1-410b-87c9-49c2f48f6fcd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbcfd5245b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identity=16841 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=807384ce-3af1-410b-87c9-49c2f48f6fcd,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=807384ce-3af1-410b-87c9-49c2f48f6fcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-5j8ct oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbcfd5245b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identity=16841 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-5j8ct subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cbcfd5245b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=894 identity=16841 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-5j8ct subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbcfd5245b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=894 identity=16841 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-5j8ct subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cbcfd5245b endpointID=894 k8sNamespace=openstack k8sPodName=placement-ks-user-5j8ct subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=807384ce-3af1-410b-87c9-49c2f48f6fcd k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=807384ce-3af1-410b-87c9-49c2f48f6fcd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=cbcfd5245b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=894 identity=16841 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-5j8ct subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 779a26ca-9c2f-4622-971e-a4b7212e9241 default }" containerID=923a5f3b85b5c032eddf58150eeacb861f7af3f26046ba217706e6026be51155 datapathConfiguration="&{false false false false false }" interface=lxcbbb9fa48b4b9 k8sPodName=openstack/placement-ks-endpoints-vpjzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=923a5f3b85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-vpjzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=923a5f3b85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2a3b8a3e-95c6-4983-b7a0-fa71ec7d7f4a,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2a3b8a3e-95c6-4983-b7a0-fa71ec7d7f4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-vpjzm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=923a5f3b85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-vpjzm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=2a3b8a3e-95c6-4983-b7a0-fa71ec7d7f4a;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2a3b8a3e-95c6-4983-b7a0-fa71ec7d7f4a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=923a5f3b85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 identity=33874 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2a3b8a3e-95c6-4983-b7a0-fa71ec7d7f4a,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2a3b8a3e-95c6-4983-b7a0-fa71ec7d7f4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-vpjzm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=923a5f3b85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 identity=33874 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-vpjzm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=923a5f3b85 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3496 identity=33874 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-vpjzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=923a5f3b85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3496 identity=33874 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-vpjzm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=923a5f3b85 endpointID=3496 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-vpjzm subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=2a3b8a3e-95c6-4983-b7a0-fa71ec7d7f4a k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2a3b8a3e-95c6-4983-b7a0-fa71ec7d7f4a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=923a5f3b85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3496 identity=33874 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-ks-endpoints-vpjzm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 031870c8-575b-4b54-b8a5-fe143c930d25 default }" containerID=abf8debc4ac06602173c7490c7bcc95317f5cffee4f410a91ab3fa29b8bbac6f datapathConfiguration="&{false false false false false }" interface=lxc5844bbd025e5 k8sPodName=openstack/neutron-coredns-7dd4958666-bkjq7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abf8debc4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3958 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-bkjq7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abf8debc4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3958 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-bkjq7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abf8debc4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3958 identity=29507 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-bkjq7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abf8debc4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3958 identity=29507 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-bkjq7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abf8debc4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3958 identity=29507 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-bkjq7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abf8debc4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3958 identity=29507 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-bkjq7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 66609030-26f1-4047-b577-3bf20fa9c8bf default }" containerID=f14cb4b482ac17b87195da9c1879cc3881def273eeeb0d19d4bc35bb2cc75d0c datapathConfiguration="&{false false false false false }" interface=lxc14e6134dbb9e k8sPodName=local-path-storage/helper-pod-create-pvc-239edd04-0783-4c44-84d5-fa114ce9f74f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f14cb4b482 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-239edd04-0783-4c44-84d5-fa114ce9f74f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f14cb4b482 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-239edd04-0783-4c44-84d5-fa114ce9f74f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f14cb4b482 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identity=26515 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-239edd04-0783-4c44-84d5-fa114ce9f74f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f14cb4b482 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identity=26515 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-239edd04-0783-4c44-84d5-fa114ce9f74f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f14cb4b482 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=282 identity=26515 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-239edd04-0783-4c44-84d5-fa114ce9f74f subsys=endpoint level=info msg="Successful endpoint creation" containerID=f14cb4b482 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=282 identity=26515 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-239edd04-0783-4c44-84d5-fa114ce9f74f subsys=daemon level=info msg="Delete endpoint request" containerID=f14cb4b482 endpointID=282 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-239edd04-0783-4c44-84d5-fa114ce9f74f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f14cb4b482 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=282 identity=26515 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-239edd04-0783-4c44-84d5-fa114ce9f74f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 916d6b61-a586-4b5a-b3dd-a7bb88ede543 default }" containerID=afbb0774686fd372835d44767c537e57a410a5f7a53838b1911ecb4cf37d60c5 datapathConfiguration="&{false false false false false }" interface=lxc2c45ae52790d k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afbb077468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1593 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afbb077468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1593 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=afbb077468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1593 identity=16003 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afbb077468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1593 identity=16003 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=afbb077468 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1593 identity=16003 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=afbb077468 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1593 identity=16003 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.251 77928782-28ad-4e52-a2b0-8d01e481e85d default }" containerID=4f101992bdaa5c9968e88de473dc86aa0d2f8b0928f25d12c5b3c174dbdfa9dc datapathConfiguration="&{false false false false false }" interface=lxc1f4b4979e3e8 k8sPodName=openstack/nova-api-osapi-55877c5566-pzgbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f101992bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-api-osapi-55877c5566-pzgbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f101992bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-api-osapi-55877c5566-pzgbn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f101992bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identity=9919 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-api-osapi-55877c5566-pzgbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f101992bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identity=9919 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-api-osapi-55877c5566-pzgbn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.112 eb2c2048-a1c7-47ef-9400-e342cd7d9c89 default }" containerID=e297d5299028ab261d1cc67183e79b8d2ba5f7b5a6bb25d2c2bd44e98af47ab3 datapathConfiguration="&{false false false false false }" interface=lxc5ccd8b6185d6 k8sPodName=openstack/nova-conductor-75dc5b9f94-xzfjh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e297d52990 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-conductor-75dc5b9f94-xzfjh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e297d52990 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-conductor-75dc5b9f94-xzfjh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e297d52990 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 identity=17712 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-conductor-75dc5b9f94-xzfjh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e297d52990 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 identity=17712 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-conductor-75dc5b9f94-xzfjh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 5a1672f8-caf9-4ab2-bf25-5a6eaaa9c997 default }" containerID=da1811297a85745ee03745ec4bc1c264137a9d1305e35e6f2174930bef578c81 datapathConfiguration="&{false false false false false }" interface=lxc0fecd37948db k8sPodName=openstack/nova-scheduler-589b79c686-4fpcv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da1811297a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-scheduler-589b79c686-4fpcv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da1811297a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-scheduler-589b79c686-4fpcv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da1811297a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 identity=9353 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-scheduler-589b79c686-4fpcv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da1811297a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 identity=9353 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-scheduler-589b79c686-4fpcv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f101992bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=911 identity=9919 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-api-osapi-55877c5566-pzgbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f101992bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=911 identity=9919 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-api-osapi-55877c5566-pzgbn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.94 bb6e1e23-f0d6-4042-b4ec-56d53c9bfdf2 default }" containerID=d6e57307b9a79d0cff902223adeca43bfb97400cb020be19d5a6561c7bd946bd datapathConfiguration="&{false false false false false }" interface=lxc5676a6112860 k8sPodName=openstack/nova-cell-setup-nsv2g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6e57307b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3546 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/nova-cell-setup-nsv2g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6e57307b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3546 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=8c725b94-ff17-405f-93c5-eb2018bdccad,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=8c725b94-ff17-405f-93c5-eb2018bdccad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/nova-cell-setup-nsv2g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=8c725b94-ff17-405f-93c5-eb2018bdccad;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=8c725b94-ff17-405f-93c5-eb2018bdccad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6e57307b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3546 identity=60893 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=8c725b94-ff17-405f-93c5-eb2018bdccad,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=8c725b94-ff17-405f-93c5-eb2018bdccad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/nova-cell-setup-nsv2g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6e57307b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3546 identity=60893 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/nova-cell-setup-nsv2g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 a1333492-5d7e-43ff-8b65-e7d2d1b29980 default }" containerID=aac5a1cb3e1b200fa8eb702a56cfaa736333f7146af3dfe951c835cab36b3c16 datapathConfiguration="&{false false false false false }" interface=lxc4bdd2e755e73 k8sPodName=openstack/nova-bootstrap-kknjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aac5a1cb3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3767 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-bootstrap-kknjt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 128ba102-d34f-4db1-aa1b-d8eea6d389c4 default }" containerID=01fbdc9cc9188d4d72a3d7d397525c2bc7e398bf84b4f24ab458a01aefd90ed5 datapathConfiguration="&{false false false false false }" interface=lxc5739b11c4157 k8sPodName=openstack/nova-db-init-bpj5b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01fbdc9cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/nova-db-init-bpj5b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aac5a1cb3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3767 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=ecadad95-0f3c-4bfc-8d4c-13948f013d6f,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ecadad95-0f3c-4bfc-8d4c-13948f013d6f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-bootstrap-kknjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=01fbdc9cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1bd4024d-0490-4a9d-ab88-d91d8134558a,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=1bd4024d-0490-4a9d-ab88-d91d8134558a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/nova-db-init-bpj5b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 33e33b02-0c70-41ac-8217-b6ca12cebe2e default }" containerID=03f46b56c023427081c845840a53b0f7400d4518ddd36d3c6092954239ee46af datapathConfiguration="&{false false false false false }" interface=lxc2e0684afd28f k8sPodName=openstack/nova-api-metadata-7f5c6fc875-phg82 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03f46b56c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/nova-api-metadata-7f5c6fc875-phg82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03f46b56c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/nova-api-metadata-7f5c6fc875-phg82 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=ecadad95-0f3c-4bfc-8d4c-13948f013d6f;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=ecadad95-0f3c-4bfc-8d4c-13948f013d6f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=aac5a1cb3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3767 identity=16345 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=ecadad95-0f3c-4bfc-8d4c-13948f013d6f,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ecadad95-0f3c-4bfc-8d4c-13948f013d6f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-bootstrap-kknjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aac5a1cb3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3767 identity=16345 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-bootstrap-kknjt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e297d52990 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1190 identity=17712 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-conductor-75dc5b9f94-xzfjh subsys=endpoint level=info msg="Successful endpoint creation" containerID=e297d52990 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1190 identity=17712 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-conductor-75dc5b9f94-xzfjh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d6e57307b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3546 identity=60893 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/nova-cell-setup-nsv2g subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6e57307b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3546 identity=60893 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/nova-cell-setup-nsv2g subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=da1811297a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1002 identity=9353 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-scheduler-589b79c686-4fpcv subsys=endpoint level=info msg="Successful endpoint creation" containerID=da1811297a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1002 identity=9353 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/nova-scheduler-589b79c686-4fpcv subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=1bd4024d-0490-4a9d-ab88-d91d8134558a;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=1bd4024d-0490-4a9d-ab88-d91d8134558a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01fbdc9cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=36596 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1bd4024d-0490-4a9d-ab88-d91d8134558a,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=1bd4024d-0490-4a9d-ab88-d91d8134558a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/nova-db-init-bpj5b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01fbdc9cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=36596 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/nova-db-init-bpj5b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=aac5a1cb3e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3767 identity=16345 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-bootstrap-kknjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=aac5a1cb3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3767 identity=16345 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-bootstrap-kknjt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=03f46b56c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.5 ipv6= k8sPodName=openstack/nova-api-metadata-7f5c6fc875-phg82 line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01fbdc9cc9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2722 identity=36596 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/nova-db-init-bpj5b subsys=endpoint level=info msg="Successful endpoint creation" containerID=01fbdc9cc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2722 identity=36596 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/nova-db-init-bpj5b subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03f46b56c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identity=21600 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/nova-api-metadata-7f5c6fc875-phg82 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03f46b56c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identity=21600 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/nova-api-metadata-7f5c6fc875-phg82 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03f46b56c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=132 identity=21600 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/nova-api-metadata-7f5c6fc875-phg82 subsys=endpoint level=info msg="Successful endpoint creation" containerID=03f46b56c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=132 identity=21600 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/nova-api-metadata-7f5c6fc875-phg82 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.70 c99b3778-51e1-4f51-b8c8-2568b783bbbc default }" containerID=860ecc5b88a0352c1e3e2919145fd537bfde02f8716288e41ec4989ceb8cba7f datapathConfiguration="&{false false false false false }" interface=lxcd55c27e18296 k8sPodName=openstack/nova-novncproxy-54cffcfc5-pjcvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=860ecc5b88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/nova-novncproxy-54cffcfc5-pjcvm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=860ecc5b88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/nova-novncproxy-54cffcfc5-pjcvm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=860ecc5b88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 identity=41319 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/nova-novncproxy-54cffcfc5-pjcvm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=860ecc5b88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 identity=41319 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/nova-novncproxy-54cffcfc5-pjcvm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=860ecc5b88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=321 identity=41319 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/nova-novncproxy-54cffcfc5-pjcvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=860ecc5b88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=321 identity=41319 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/nova-novncproxy-54cffcfc5-pjcvm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=01fbdc9cc9 endpointID=2722 k8sNamespace=openstack k8sPodName=nova-db-init-bpj5b subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=1bd4024d-0490-4a9d-ab88-d91d8134558a k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=1bd4024d-0490-4a9d-ab88-d91d8134558a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=01fbdc9cc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2722 identity=36596 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/nova-db-init-bpj5b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 b8e936a6-a002-41df-8779-b105cda71b09 default }" containerID=f02cd0f1a9b86a51204754f13ff3340d4e8b4e7a8a52d4be2984bf1619f9ce67 datapathConfiguration="&{false false false false false }" interface=lxc5346996d42dd k8sPodName=openstack/nova-db-sync-xfv44 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f02cd0f1a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/nova-db-sync-xfv44 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f02cd0f1a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0c51fc70-365a-4769-87fa-0985401b08ed,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=0c51fc70-365a-4769-87fa-0985401b08ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/nova-db-sync-xfv44 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f02cd0f1a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=openstack/nova-db-sync-xfv44 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=0c51fc70-365a-4769-87fa-0985401b08ed;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=0c51fc70-365a-4769-87fa-0985401b08ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f02cd0f1a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identity=5662 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0c51fc70-365a-4769-87fa-0985401b08ed,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=0c51fc70-365a-4769-87fa-0985401b08ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/nova-db-sync-xfv44 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f02cd0f1a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identity=5662 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/nova-db-sync-xfv44 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f02cd0f1a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=980 identity=5662 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/nova-db-sync-xfv44 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f02cd0f1a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=980 identity=5662 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/nova-db-sync-xfv44 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f02cd0f1a9 endpointID=980 k8sNamespace=openstack k8sPodName=nova-db-sync-xfv44 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=0c51fc70-365a-4769-87fa-0985401b08ed k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=0c51fc70-365a-4769-87fa-0985401b08ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=f02cd0f1a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=980 identity=5662 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/nova-db-sync-xfv44 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 a273e829-39cf-4ebc-80e5-38afda32ce32 default }" containerID=4c9ec9069b6c7f1f8ca8d3fa1d32fecc1b78a41518610704cc3e9dde67684ef6 datapathConfiguration="&{false false false false false }" interface=lxc81696287c409 k8sPodName=openstack/nova-rabbit-init-7xp6d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c9ec9069b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3923 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/nova-rabbit-init-7xp6d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c9ec9069b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3923 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3c4d7f67-9377-4bb8-85b4-beb2ba1d8dde,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3c4d7f67-9377-4bb8-85b4-beb2ba1d8dde,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/nova-rabbit-init-7xp6d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=3c4d7f67-9377-4bb8-85b4-beb2ba1d8dde;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3c4d7f67-9377-4bb8-85b4-beb2ba1d8dde;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c9ec9069b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3923 identity=59267 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3c4d7f67-9377-4bb8-85b4-beb2ba1d8dde,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3c4d7f67-9377-4bb8-85b4-beb2ba1d8dde,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/nova-rabbit-init-7xp6d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c9ec9069b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3923 identity=59267 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/nova-rabbit-init-7xp6d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4c9ec9069b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3923 identity=59267 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/nova-rabbit-init-7xp6d subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c9ec9069b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3923 identity=59267 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/nova-rabbit-init-7xp6d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c9ec9069b endpointID=3923 k8sNamespace=openstack k8sPodName=nova-rabbit-init-7xp6d subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=3c4d7f67-9377-4bb8-85b4-beb2ba1d8dde k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3c4d7f67-9377-4bb8-85b4-beb2ba1d8dde k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=4c9ec9069b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3923 identity=59267 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/nova-rabbit-init-7xp6d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 ed8781f7-df49-436f-8ecb-f9c9ff63fa22 default }" containerID=0a95fa260328e5773c4adf81de996dc4c5008c545f7084f520f86f1f937ccf85 datapathConfiguration="&{false false false false false }" interface=lxc08cf124d6841 k8sPodName=openstack/nova-ks-service-c6svt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a95fa2603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2938 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/nova-ks-service-c6svt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a95fa2603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2938 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0b383998-a698-4184-8217-a72e89de5d2d,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=0b383998-a698-4184-8217-a72e89de5d2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/nova-ks-service-c6svt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=0b383998-a698-4184-8217-a72e89de5d2d;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=0b383998-a698-4184-8217-a72e89de5d2d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a95fa2603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2938 identity=29857 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0b383998-a698-4184-8217-a72e89de5d2d,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=0b383998-a698-4184-8217-a72e89de5d2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/nova-ks-service-c6svt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a95fa2603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2938 identity=29857 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/nova-ks-service-c6svt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0a95fa2603 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2938 identity=29857 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/nova-ks-service-c6svt subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a95fa2603 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2938 identity=29857 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/nova-ks-service-c6svt subsys=daemon level=info msg="Delete endpoint request" containerID=0a95fa2603 endpointID=2938 k8sNamespace=openstack k8sPodName=nova-ks-service-c6svt subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=0b383998-a698-4184-8217-a72e89de5d2d k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=0b383998-a698-4184-8217-a72e89de5d2d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=0a95fa2603 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2938 identity=29857 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/nova-ks-service-c6svt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 e6da7fca-455c-4103-bded-0df7eb6ad7a9 default }" containerID=62dfaf21204439f3b3d06695b1bc2ba0f988d687a6a766f4a3c1c33e84aa2858 datapathConfiguration="&{false false false false false }" interface=lxce11afe945b99 k8sPodName=openstack/nova-ks-endpoints-qhnbd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62dfaf2120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/nova-ks-endpoints-qhnbd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62dfaf2120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0415cd4c-cf80-450a-b8de-c6e683330d98,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0415cd4c-cf80-450a-b8de-c6e683330d98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/nova-ks-endpoints-qhnbd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=0415cd4c-cf80-450a-b8de-c6e683330d98;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0415cd4c-cf80-450a-b8de-c6e683330d98;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62dfaf2120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identity=13917 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0415cd4c-cf80-450a-b8de-c6e683330d98,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0415cd4c-cf80-450a-b8de-c6e683330d98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/nova-ks-endpoints-qhnbd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=62dfaf2120 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=821 identity=13917 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/nova-ks-endpoints-qhnbd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62dfaf2120 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=821 identity=13917 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/nova-ks-endpoints-qhnbd subsys=endpoint level=info msg="Successful endpoint creation" containerID=62dfaf2120 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=821 identity=13917 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/nova-ks-endpoints-qhnbd subsys=daemon level=info msg="Delete endpoint request" containerID=62dfaf2120 endpointID=821 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-qhnbd subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=0415cd4c-cf80-450a-b8de-c6e683330d98 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0415cd4c-cf80-450a-b8de-c6e683330d98 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=62dfaf2120 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=821 identity=13917 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/nova-ks-endpoints-qhnbd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 b7c2e312-4a7d-490f-9ca6-affad38e8908 default }" containerID=556ac046584d4949c0cb78ce1791fffea0e14c083e70c361b900ddd4a1af09d1 datapathConfiguration="&{false false false false false }" interface=lxcc474be22e04a k8sPodName=openstack/nova-ks-user-sfwtk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=556ac04658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-user-sfwtk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=556ac04658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=127de608-66b5-43be-9415-a3de28164c1d,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=127de608-66b5-43be-9415-a3de28164c1d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-user-sfwtk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=127de608-66b5-43be-9415-a3de28164c1d;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=127de608-66b5-43be-9415-a3de28164c1d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=556ac04658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identity=35882 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=127de608-66b5-43be-9415-a3de28164c1d,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=127de608-66b5-43be-9415-a3de28164c1d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-user-sfwtk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=556ac04658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identity=35882 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-user-sfwtk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=556ac04658 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=205 identity=35882 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-user-sfwtk subsys=endpoint level=info msg="Successful endpoint creation" containerID=556ac04658 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=205 identity=35882 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-user-sfwtk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=556ac04658 endpointID=205 k8sNamespace=openstack k8sPodName=nova-ks-user-sfwtk subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=127de608-66b5-43be-9415-a3de28164c1d k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=127de608-66b5-43be-9415-a3de28164c1d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=556ac04658 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=205 identity=35882 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/nova-ks-user-sfwtk subsys=endpoint level=info msg="Delete endpoint request" containerID=aac5a1cb3e endpointID=3767 k8sNamespace=openstack k8sPodName=nova-bootstrap-kknjt subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=ecadad95-0f3c-4bfc-8d4c-13948f013d6f k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=ecadad95-0f3c-4bfc-8d4c-13948f013d6f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=aac5a1cb3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3767 identity=16345 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/nova-bootstrap-kknjt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 95736808-f740-4917-98b4-52e95c0c6a27 default }" containerID=2432d7ef748c0c21118a7bc728535a49ac9223bc1de9d2939782bbc3d5ad1d82 datapathConfiguration="&{false false false false false }" interface=lxcbe240097a7f5 k8sPodName=local-path-storage/helper-pod-create-pvc-97c36fdc-f191-492b-ab81-dbd051537984 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2432d7ef74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-97c36fdc-f191-492b-ab81-dbd051537984 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2432d7ef74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-97c36fdc-f191-492b-ab81-dbd051537984 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2432d7ef74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=26515 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-97c36fdc-f191-492b-ab81-dbd051537984 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2432d7ef74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=26515 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-97c36fdc-f191-492b-ab81-dbd051537984 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2432d7ef74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1533 identity=26515 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-97c36fdc-f191-492b-ab81-dbd051537984 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2432d7ef74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1533 identity=26515 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-97c36fdc-f191-492b-ab81-dbd051537984 subsys=daemon level=info msg="Delete endpoint request" containerID=2432d7ef74 endpointID=1533 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-97c36fdc-f191-492b-ab81-dbd051537984 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2432d7ef74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1533 identity=26515 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-97c36fdc-f191-492b-ab81-dbd051537984 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 4cf0711e-724d-4e02-a299-d26cfa179b30 default }" containerID=6692915b3df8a83be91ba45986ebb0ea965cc5f8f81edbf12a8f3f7380d92351 datapathConfiguration="&{false false false false false }" interface=lxc7e3494dac1ed k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6692915b3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6692915b3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6692915b3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6692915b3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identity=1697 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6692915b3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identity=1697 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6692915b3d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3476 identity=1697 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6692915b3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3476 identity=1697 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.104 8daffccb-7c08-4608-9709-5951fdc40885 default }" containerID=2c8dac150323725a2545195a33c4b68c9acd4ca129e841cbdfe244273f08c050 datapathConfiguration="&{false false false false false }" interface=lxc97f3a8f8d92a k8sPodName=openstack/neutron-server-74679dc6c7-ck9bq labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.44 41a4cbf9-58ea-4f07-9d01-c45f67b63acb default }" containerID=649abaac2cb929df420cf3795b9e268b4bbd64c5f48d1d9e413d800ab9119349 datapathConfiguration="&{false false false false false }" interface=lxc4103b7176e9a k8sPodName=openstack/neutron-rpc-server-564744787c-x8rnx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c8dac1503 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3699 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/neutron-server-74679dc6c7-ck9bq subsys=endpoint level=info msg="New endpoint" containerID=649abaac2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-rpc-server-564744787c-x8rnx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c8dac1503 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3699 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/neutron-server-74679dc6c7-ck9bq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=649abaac2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-rpc-server-564744787c-x8rnx subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c8dac1503 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3699 identity=47527 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/neutron-server-74679dc6c7-ck9bq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c8dac1503 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3699 identity=47527 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/neutron-server-74679dc6c7-ck9bq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=649abaac2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-rpc-server-564744787c-x8rnx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=649abaac2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 identity=41684 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-rpc-server-564744787c-x8rnx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=649abaac2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 identity=41684 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-rpc-server-564744787c-x8rnx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 0921b4d5-1df6-4f6b-92d4-e8da1b45659c default }" containerID=89e5be9ab7f36de08a5dbcdc1b33531d36a077bee2b5bcde3ef0f67c1d705c57 datapathConfiguration="&{false false false false false }" interface=lxce6a69fe92278 k8sPodName=openstack/neutron-db-init-v4tdz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89e5be9ab7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2393 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/neutron-db-init-v4tdz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89e5be9ab7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2393 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=9e0fb185-bef0-47cc-b36a-6eda359842ce,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=9e0fb185-bef0-47cc-b36a-6eda359842ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/neutron-db-init-v4tdz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=9e0fb185-bef0-47cc-b36a-6eda359842ce;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=9e0fb185-bef0-47cc-b36a-6eda359842ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89e5be9ab7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2393 identity=40939 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=9e0fb185-bef0-47cc-b36a-6eda359842ce,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=9e0fb185-bef0-47cc-b36a-6eda359842ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/neutron-db-init-v4tdz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89e5be9ab7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2393 identity=40939 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/neutron-db-init-v4tdz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c8dac1503 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3699 identity=47527 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/neutron-server-74679dc6c7-ck9bq subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c8dac1503 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3699 identity=47527 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/neutron-server-74679dc6c7-ck9bq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=649abaac2c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3237 identity=41684 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-rpc-server-564744787c-x8rnx subsys=endpoint level=info msg="Successful endpoint creation" containerID=649abaac2c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3237 identity=41684 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-rpc-server-564744787c-x8rnx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=89e5be9ab7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2393 identity=40939 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/neutron-db-init-v4tdz subsys=endpoint level=info msg="Successful endpoint creation" containerID=89e5be9ab7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2393 identity=40939 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/neutron-db-init-v4tdz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89e5be9ab7 endpointID=2393 k8sNamespace=openstack k8sPodName=neutron-db-init-v4tdz subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=9e0fb185-bef0-47cc-b36a-6eda359842ce k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=9e0fb185-bef0-47cc-b36a-6eda359842ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=89e5be9ab7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2393 identity=40939 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/neutron-db-init-v4tdz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 a06f3859-3207-4da3-bd83-7a4deee46a2c default }" containerID=97cdd74fff043439936ad9292ebacdb3761f3770fce259bd6ac9a8ec2bda569b datapathConfiguration="&{false false false false false }" interface=lxcba4d952d3d27 k8sPodName=openstack/neutron-db-sync-g2hhv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97cdd74fff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-g2hhv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97cdd74fff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=fd8ef3fb-1bab-4a6a-97ec-f2496990e516,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=fd8ef3fb-1bab-4a6a-97ec-f2496990e516,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-g2hhv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=fd8ef3fb-1bab-4a6a-97ec-f2496990e516;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=fd8ef3fb-1bab-4a6a-97ec-f2496990e516;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97cdd74fff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identity=16340 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=fd8ef3fb-1bab-4a6a-97ec-f2496990e516,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=fd8ef3fb-1bab-4a6a-97ec-f2496990e516,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-g2hhv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97cdd74fff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identity=16340 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-g2hhv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97cdd74fff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1918 identity=16340 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-g2hhv subsys=endpoint level=info msg="Successful endpoint creation" containerID=97cdd74fff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1918 identity=16340 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-g2hhv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=97cdd74fff endpointID=1918 k8sNamespace=openstack k8sPodName=neutron-db-sync-g2hhv subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=fd8ef3fb-1bab-4a6a-97ec-f2496990e516 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=fd8ef3fb-1bab-4a6a-97ec-f2496990e516 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=97cdd74fff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1918 identity=16340 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/neutron-db-sync-g2hhv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 10b348e3-60f8-4a85-8d34-22c38b9cfdad default }" containerID=1080a8675f774b8e9c6e5f0e821c14a031900228d74643fe61c5d9160e921acb datapathConfiguration="&{false false false false false }" interface=lxc147068b55163 k8sPodName=openstack/neutron-rabbit-init-b9ds4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1080a8675f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1794 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/neutron-rabbit-init-b9ds4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1080a8675f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1794 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=e804cde1-89f6-432b-9446-cf48684f4bcb,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e804cde1-89f6-432b-9446-cf48684f4bcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/neutron-rabbit-init-b9ds4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=e804cde1-89f6-432b-9446-cf48684f4bcb;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e804cde1-89f6-432b-9446-cf48684f4bcb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1080a8675f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1794 identity=55888 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=e804cde1-89f6-432b-9446-cf48684f4bcb,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e804cde1-89f6-432b-9446-cf48684f4bcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/neutron-rabbit-init-b9ds4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1080a8675f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1794 identity=55888 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/neutron-rabbit-init-b9ds4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1080a8675f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1794 identity=55888 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/neutron-rabbit-init-b9ds4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1080a8675f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1794 identity=55888 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/neutron-rabbit-init-b9ds4 subsys=daemon level=info msg="Delete endpoint request" containerID=1080a8675f endpointID=1794 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-b9ds4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=e804cde1-89f6-432b-9446-cf48684f4bcb k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e804cde1-89f6-432b-9446-cf48684f4bcb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=1080a8675f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1794 identity=55888 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/neutron-rabbit-init-b9ds4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 6c591bf7-a65b-4b32-ac1a-8daa5aa01065 default }" containerID=a1b89498473327feb85752be73224a6b5a42959d13756b38c1874ea2e29cd79d datapathConfiguration="&{false false false false false }" interface=lxcb1781897d57a k8sPodName=openstack/neutron-ks-service-fsnh7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1b8949847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/neutron-ks-service-fsnh7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1b8949847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=5f31a5cd-e333-4ed8-9830-333eab797027,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=5f31a5cd-e333-4ed8-9830-333eab797027,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/neutron-ks-service-fsnh7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a1b8949847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.101 ipv6= k8sPodName=openstack/neutron-ks-service-fsnh7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=5f31a5cd-e333-4ed8-9830-333eab797027;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=5f31a5cd-e333-4ed8-9830-333eab797027;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1b8949847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=6833 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=5f31a5cd-e333-4ed8-9830-333eab797027,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=5f31a5cd-e333-4ed8-9830-333eab797027,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/neutron-ks-service-fsnh7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1b8949847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=6833 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/neutron-ks-service-fsnh7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1b8949847 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=216 identity=6833 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/neutron-ks-service-fsnh7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1b8949847 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=216 identity=6833 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/neutron-ks-service-fsnh7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a1b8949847 endpointID=216 k8sNamespace=openstack k8sPodName=neutron-ks-service-fsnh7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=5f31a5cd-e333-4ed8-9830-333eab797027 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=5f31a5cd-e333-4ed8-9830-333eab797027 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=a1b8949847 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=216 identity=6833 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/neutron-ks-service-fsnh7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 efe2e23b-a4a8-4942-9828-df563c73c91b default }" containerID=57b2e15e44bccb111dc0f23fff58f879f0bef1091c6b94ef655efe838f505d1c datapathConfiguration="&{false false false false false }" interface=lxc881de333016d k8sPodName=openstack/neutron-ks-endpoints-p2phs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57b2e15e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-ks-endpoints-p2phs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57b2e15e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1a1d76e1-a9aa-4cdd-b45f-40fcd5d6b1e9,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1a1d76e1-a9aa-4cdd-b45f-40fcd5d6b1e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-ks-endpoints-p2phs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=57b2e15e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-ks-endpoints-p2phs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=1a1d76e1-a9aa-4cdd-b45f-40fcd5d6b1e9;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1a1d76e1-a9aa-4cdd-b45f-40fcd5d6b1e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57b2e15e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identity=25161 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1a1d76e1-a9aa-4cdd-b45f-40fcd5d6b1e9,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1a1d76e1-a9aa-4cdd-b45f-40fcd5d6b1e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-ks-endpoints-p2phs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57b2e15e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identity=25161 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-ks-endpoints-p2phs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57b2e15e44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2658 identity=25161 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-ks-endpoints-p2phs subsys=endpoint level=info msg="Successful endpoint creation" containerID=57b2e15e44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2658 identity=25161 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-ks-endpoints-p2phs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57b2e15e44 endpointID=2658 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-p2phs subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=1a1d76e1-a9aa-4cdd-b45f-40fcd5d6b1e9 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1a1d76e1-a9aa-4cdd-b45f-40fcd5d6b1e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=57b2e15e44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2658 identity=25161 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-ks-endpoints-p2phs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 2955a77e-a977-435d-b8dd-b8eb98f296df default }" containerID=a618127bb837c3beda6b8cdbbc19fac29160602e7b087fb12f668641225b0e79 datapathConfiguration="&{false false false false false }" interface=lxcf60fd9ed46b2 k8sPodName=openstack/neutron-ks-user-pg784 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a618127bb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-ks-user-pg784 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a618127bb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d5e3c001-1cbf-477f-b5f8-6023f8c5f901,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=d5e3c001-1cbf-477f-b5f8-6023f8c5f901,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-ks-user-pg784 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a618127bb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-ks-user-pg784 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=d5e3c001-1cbf-477f-b5f8-6023f8c5f901;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=d5e3c001-1cbf-477f-b5f8-6023f8c5f901;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a618127bb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 identity=26279 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d5e3c001-1cbf-477f-b5f8-6023f8c5f901,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=d5e3c001-1cbf-477f-b5f8-6023f8c5f901,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-ks-user-pg784 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a618127bb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 identity=26279 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-ks-user-pg784 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a618127bb8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2578 identity=26279 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-ks-user-pg784 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a618127bb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2578 identity=26279 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-ks-user-pg784 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a618127bb8 endpointID=2578 k8sNamespace=openstack k8sPodName=neutron-ks-user-pg784 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=d5e3c001-1cbf-477f-b5f8-6023f8c5f901 k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=d5e3c001-1cbf-477f-b5f8-6023f8c5f901 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=a618127bb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2578 identity=26279 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/neutron-ks-user-pg784 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 246fe4b1-1bce-4cb1-bcd8-34bd0ec3d038 default }" containerID=50830b7f3a0b1ecb8933b044e029ab923916afc9901c75bf9e8dde5c0f7d37d1 datapathConfiguration="&{false false false false false }" interface=lxc456332d06778 k8sPodName=openstack/nova-service-cleaner-29670660-jc5c6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50830b7f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3282 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-service-cleaner-29670660-jc5c6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50830b7f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3282 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=4fcd213a-bf17-47b3-bbb9-0627d5091131,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29670660,k8s:component=service-cleaner,k8s:controller-uid=4fcd213a-bf17-47b3-bbb9-0627d5091131,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29670660,k8s:release_group=nova" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-service-cleaner-29670660-jc5c6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=4fcd213a-bf17-47b3-bbb9-0627d5091131;k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29670660;k8s:component=service-cleaner;k8s:controller-uid=4fcd213a-bf17-47b3-bbb9-0627d5091131;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-service-cleaner-29670660;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50830b7f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3282 identity=8776 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=4fcd213a-bf17-47b3-bbb9-0627d5091131,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29670660,k8s:component=service-cleaner,k8s:controller-uid=4fcd213a-bf17-47b3-bbb9-0627d5091131,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29670660,k8s:release_group=nova" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-service-cleaner-29670660-jc5c6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=50830b7f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3282 identity=8776 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-service-cleaner-29670660-jc5c6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 fe2f57e0-37e7-4988-be19-aa8a102e2bcf default }" containerID=5a2085cf8c0e84c8e45a940089d70f282db389733c0be1a2aa36ed3ba0301b22 datapathConfiguration="&{false false false false false }" interface=lxcf34a45f8a27e k8sPodName=openstack/nova-cell-setup-29670660-9d65h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a2085cf8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=722 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-cell-setup-29670660-9d65h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a2085cf8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=722 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2bfb7799-d366-4103-b735-807f2449b18a,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29670660,k8s:component=cell-setup,k8s:controller-uid=2bfb7799-d366-4103-b735-807f2449b18a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29670660,k8s:release_group=nova" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-cell-setup-29670660-9d65h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=2bfb7799-d366-4103-b735-807f2449b18a;k8s:batch.kubernetes.io/job-name=nova-cell-setup-29670660;k8s:component=cell-setup;k8s:controller-uid=2bfb7799-d366-4103-b735-807f2449b18a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup-29670660;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a2085cf8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=722 identity=34629 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2bfb7799-d366-4103-b735-807f2449b18a,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29670660,k8s:component=cell-setup,k8s:controller-uid=2bfb7799-d366-4103-b735-807f2449b18a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29670660,k8s:release_group=nova" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-cell-setup-29670660-9d65h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a2085cf8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=722 identity=34629 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-cell-setup-29670660-9d65h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50830b7f3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3282 identity=8776 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-service-cleaner-29670660-jc5c6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=50830b7f3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3282 identity=8776 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-service-cleaner-29670660-jc5c6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5a2085cf8c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=722 identity=34629 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-cell-setup-29670660-9d65h subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a2085cf8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=722 identity=34629 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-cell-setup-29670660-9d65h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager