level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="827.491µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="52.931µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="758.98µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.56µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=97.098545ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.55µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.39µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="48.241µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="63.752µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="59.051µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="456.862µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.26µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.567276ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.464319ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="32.451µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="31.691µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="390.98µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="92.052µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="73.022µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=40.057005ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="95.382µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="10.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.157.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.166314ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="14.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.369801ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.32µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.902305ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="10.82µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.08µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="19.05µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.07µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="73.222µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="257.496µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.07µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="191.515µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="563.985µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="997.107µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.29µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="31.54µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.157 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.157 ipAddr.ipv6="" k8sNodeIP=199.204.45.157 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.157" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.56" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.157" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.157} {CiliumInternalIP 10.0.0.56}] 10.0.0.0/24 [] [] 10.0.0.42 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40065" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.477862923s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="23.43µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="8.55µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="50.031µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="34.111µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3083 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3083 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3083 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.412228251s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=322.555579ms file-path=/var/run/cilium/state/templates/c1d235f892f690619eceab9359fb9a7d897491ce32d6808ba506bdb3d215718c/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3083 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 ipv4=10.0.0.42 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identityLabels="reserved:health" ipv4=10.0.0.42 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=4 identityLabels="reserved:health" ipv4=10.0.0.42 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 55f06a4c-5b6d-4507-85e5-f0de7de7c07e default }" containerID=aba1a5317f0c443e0b9c02cf9c42cad57544837d6e85198f8afb3d8433c41237 datapathConfiguration="&{false false false false false }" interface=lxc1acc4c24b9cf k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqq97 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.192 9deba219-e5ae-40d0-9786-f5ca9f45bdb9 default }" containerID=7ea3e52d8ee62f5b67e6ac1bbe040a29221deb9b51fb0aa522d3ec90caca646f datapathConfiguration="&{false false false false false }" interface=lxc2b6be8b4cb10 k8sPodName=kube-system/coredns-7c96b6546b-245w6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aba1a5317f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=654 ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqq97 subsys=endpoint level=info msg="New endpoint" containerID=7ea3e52d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-245w6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aba1a5317f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=654 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=0b2b6981-cbfa-468c-b3ee-f9ca14c11d33,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=0b2b6981-cbfa-468c-b3ee-f9ca14c11d33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqq97 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ea3e52d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-245w6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=0b2b6981-cbfa-468c-b3ee-f9ca14c11d33;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=0b2b6981-cbfa-468c-b3ee-f9ca14c11d33;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aba1a5317f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=654 identity=4639 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=0b2b6981-cbfa-468c-b3ee-f9ca14c11d33,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=0b2b6981-cbfa-468c-b3ee-f9ca14c11d33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqq97 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aba1a5317f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=654 identity=4639 ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqq97 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7ea3e52d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-245w6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ea3e52d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identity=11772 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-245w6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ea3e52d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identity=11772 ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-245w6 subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.158573768s file-path=/var/run/cilium/state/templates/33ef07d83b563a491a6b716c24b58dcd0772bdea2f3bebfd03c46147ad129ef8/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=7ea3e52d8e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=733 identity=11772 ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-245w6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ea3e52d8e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=733 identity=11772 ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-245w6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1150 identity=4 ipv4=10.0.0.42 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aba1a5317f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=654 identity=4639 ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqq97 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aba1a5317f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=654 identity=4639 ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqq97 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aba1a5317f endpointID=654 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-wqq97 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=0b2b6981-cbfa-468c-b3ee-f9ca14c11d33 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=0b2b6981-cbfa-468c-b3ee-f9ca14c11d33 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=aba1a5317f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=654 identity=4639 ipv4=10.0.0.86 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wqq97 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 cfb97fba-1bf7-4ae2-9d7a-893e689d380d default }" containerID=f9f8d23e11db9869f7ada4768348285fc8cdbff9216a4205e53cbdd88c3eb4e0 datapathConfiguration="&{false false false false false }" interface=lxc98b6aa33af57 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bcw9g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9f8d23e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bcw9g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9f8d23e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bcw9g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f9f8d23e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bcw9g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9f8d23e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=11233 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bcw9g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9f8d23e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=11233 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bcw9g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9f8d23e11 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=662 identity=11233 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bcw9g subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9f8d23e11 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=662 identity=11233 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bcw9g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3083 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03083 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03083 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03083 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03083:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3083 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 75d0eec5-fbe5-431b-848a-fb7d2eee05d9 default }" containerID=30241116ef8adc78989b23fc563ee772c0b17b2ee933941915bbf9fb6f73361b datapathConfiguration="&{false false false false false }" interface=lxcaac2a8dcdb7f k8sPodName=kube-system/coredns-67659f764b-hbsss labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30241116ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-hbsss subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30241116ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-hbsss subsys=endpoint level=info msg="Identity of endpoint changed" containerID=30241116ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identity=11772 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-hbsss oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30241116ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identity=11772 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-hbsss subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 447a97e1-b462-47d9-8fa1-c72a420dd854 default }" containerID=d49d68ea30b8ad57e0795c980d9e4fea77df967174cd571e5ac7231a5054f97c datapathConfiguration="&{false false false false false }" interface=lxc106b4821cf2c k8sPodName=kube-system/coredns-67659f764b-9xntw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d49d68ea30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-9xntw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d49d68ea30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-9xntw subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d49d68ea30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identity=11772 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-9xntw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d49d68ea30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identity=11772 ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-9xntw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30241116ef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=935 identity=11772 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-hbsss subsys=endpoint level=info msg="Successful endpoint creation" containerID=30241116ef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=935 identity=11772 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-hbsss subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d49d68ea30 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=849 identity=11772 ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-9xntw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d49d68ea30 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=849 identity=11772 ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-9xntw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.16 6ec2353e-9683-41f4-9eec-a0d1ed2e7c75 default }" containerID=eaf03717099516022df0ee931902afc6fb05d7d7472ba2dba86e8ccc019fef9d datapathConfiguration="&{false false false false false }" interface=lxc019f9c5d57bf k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r78zb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eaf0371709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r78zb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eaf0371709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r78zb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=eaf0371709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identity=4393 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r78zb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eaf0371709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identity=4393 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r78zb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eaf0371709 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=33 identity=4393 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r78zb subsys=endpoint level=info msg="Successful endpoint creation" containerID=eaf0371709 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=33 identity=4393 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r78zb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ea3e52d8e endpointID=733 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-245w6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=7ea3e52d8e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=733 identity=11772 ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-245w6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 e88578ff-3494-4b41-b3e7-a5a88450a062 default }" containerID=8a6363a4a6fcfe0a8151d2e43bc1a44ee538a0dada6c6e6604151751bb902ad3 datapathConfiguration="&{false false false false false }" interface=lxcaf469323ae5a k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-zj4d6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a6363a4a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-zj4d6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a6363a4a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-zj4d6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a6363a4a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identity=20747 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-zj4d6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a6363a4a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identity=20747 ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-zj4d6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.47 e0b4f27d-e913-4e73-82dc-db0ee5e0dd2f default }" containerID=86d1d91589d0bfe731c7ca436755c6215bfda722871a1c6210a862857b21c897 datapathConfiguration="&{false false false false false }" interface=lxcc2c4f21cae82 k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-bc28t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86d1d91589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-bc28t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86d1d91589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-bc28t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86d1d91589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identity=45506 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-bc28t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86d1d91589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identity=45506 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-bc28t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a6363a4a6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2000 identity=20747 ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-zj4d6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a6363a4a6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2000 identity=20747 ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-zj4d6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.57 8653b77b-9f09-4881-b3a6-c1f99aab0c57 default }" containerID=9fc9b5bbf982eca7f73b7a79f48d228b0b3a9ea240d168998dc7ec16d7070143 datapathConfiguration="&{false false false false false }" interface=lxc795cba0a05e8 k8sPodName=cert-manager/cert-manager-79c48d47db-xppsj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fc9b5bbf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 ipv4=10.0.0.57 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-xppsj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fc9b5bbf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.57 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-xppsj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9fc9b5bbf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=51986 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.57 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-xppsj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fc9b5bbf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=51986 ipv4=10.0.0.57 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-xppsj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86d1d91589 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3682 identity=45506 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-bc28t subsys=endpoint level=info msg="Successful endpoint creation" containerID=86d1d91589 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3682 identity=45506 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-bc28t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9fc9b5bbf9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1299 identity=51986 ipv4=10.0.0.57 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-xppsj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fc9b5bbf9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1299 identity=51986 ipv4=10.0.0.57 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-xppsj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.70 1db83286-f224-4908-a082-2e65c005781d default }" containerID=31e4833ba095065f3b0181c053ccfe4683a671a8eb58bdde49c757a7b6a81685 datapathConfiguration="&{false false false false false }" interface=lxcf0287db9b8d1 k8sPodName=cert-manager/cert-manager-startupapicheck-mz2dp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31e4833ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mz2dp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31e4833ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=8bff53fb-4e85-4c8b-a19f-d6dc2e3f3c8a,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=8bff53fb-4e85-4c8b-a19f-d6dc2e3f3c8a,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mz2dp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=8bff53fb-4e85-4c8b-a19f-d6dc2e3f3c8a;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=8bff53fb-4e85-4c8b-a19f-d6dc2e3f3c8a;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31e4833ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identity=17091 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=8bff53fb-4e85-4c8b-a19f-d6dc2e3f3c8a,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=8bff53fb-4e85-4c8b-a19f-d6dc2e3f3c8a,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mz2dp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31e4833ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identity=17091 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mz2dp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31e4833ba0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1201 identity=17091 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mz2dp subsys=endpoint level=info msg="Successful endpoint creation" containerID=31e4833ba0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1201 identity=17091 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mz2dp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=31e4833ba0 endpointID=1201 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-mz2dp subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=8bff53fb-4e85-4c8b-a19f-d6dc2e3f3c8a k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=8bff53fb-4e85-4c8b-a19f-d6dc2e3f3c8a k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=31e4833ba0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1201 identity=17091 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mz2dp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 b3c97f56-441c-4599-abdd-f8ffc662ab05 default }" containerID=27b4b69dfc276fea67d98b0b6207e20346a884f2d2614013dd09fe13d29971b6 datapathConfiguration="&{false false false false false }" interface=lxce724f2ef34fe k8sPodName=ingress-nginx/ingress-nginx-admission-create-bxxv8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27b4b69dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2915 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bxxv8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27b4b69dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2915 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f11d8c19-28b8-4d51-bee0-af521e4c6b64,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=f11d8c19-28b8-4d51-bee0-af521e4c6b64,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bxxv8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=f11d8c19-28b8-4d51-bee0-af521e4c6b64;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=f11d8c19-28b8-4d51-bee0-af521e4c6b64;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27b4b69dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2915 identity=19127 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f11d8c19-28b8-4d51-bee0-af521e4c6b64,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=f11d8c19-28b8-4d51-bee0-af521e4c6b64,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bxxv8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27b4b69dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2915 identity=19127 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bxxv8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=27b4b69dfc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2915 identity=19127 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bxxv8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=27b4b69dfc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2915 identity=19127 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bxxv8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=27b4b69dfc endpointID=2915 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-bxxv8 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=f11d8c19-28b8-4d51-bee0-af521e4c6b64 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=f11d8c19-28b8-4d51-bee0-af521e4c6b64 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=27b4b69dfc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2915 identity=19127 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bxxv8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 211f02ac-8821-4a48-a72c-56dd505c1edf default }" containerID=dbf7c988540b5f265c2666baf8b8307a8b1aab1eb31090ee9e4f9d2425ccaba4 datapathConfiguration="&{false false false false false }" interface=lxca6e018be934f k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-twdq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbf7c98854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-twdq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbf7c98854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-twdq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbf7c98854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=33981 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-twdq8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dbf7c98854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=33981 ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-twdq8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbf7c98854 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=168 identity=33981 ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-twdq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbf7c98854 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=168 identity=33981 ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-twdq8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.3 624bb839-18c7-4688-a130-75cfd9dff15a default }" containerID=7f533ec25e8ff94d2e967e95dab1213b813329f599afad17fe9f92851bc2f042 datapathConfiguration="&{false false false false false }" interface=lxc55cd1914dc8f k8sPodName=ingress-nginx/ingress-nginx-admission-patch-njscx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f533ec25e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 ipv4=10.0.0.3 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-njscx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f533ec25e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=648f295f-4293-4065-a193-5122be40e287,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=648f295f-4293-4065-a193-5122be40e287,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.3 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-njscx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=648f295f-4293-4065-a193-5122be40e287;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=648f295f-4293-4065-a193-5122be40e287;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f533ec25e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 identity=27286 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=648f295f-4293-4065-a193-5122be40e287,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=648f295f-4293-4065-a193-5122be40e287,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.3 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-njscx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f533ec25e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 identity=27286 ipv4=10.0.0.3 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-njscx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f533ec25e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1274 identity=27286 ipv4=10.0.0.3 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-njscx subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f533ec25e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1274 identity=27286 ipv4=10.0.0.3 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-njscx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f533ec25e endpointID=1274 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-njscx subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=648f295f-4293-4065-a193-5122be40e287 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=648f295f-4293-4065-a193-5122be40e287 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=7f533ec25e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1274 identity=27286 ipv4=10.0.0.3 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-njscx subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=05fe2561-85a3-438d-be66-a9fabec48125] Description:}]" policyAddRequest=40c566db-4151-45a1-9131-7c8315621bec subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=40c566db-4151-45a1-9131-7c8315621bec policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c2375569-423b-47a3-b3c6-1eaa3983810e] Description:}]" policyAddRequest=0047cdc0-2a85-4490-8059-63c8e111a18c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0047cdc0-2a85-4490-8059-63c8e111a18c policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.174 ccbcc4d9-0e1e-4258-88ad-f02b6b7a67cc default }" containerID=9a7f16ee0f89b1aab74b08bc4c94a5994a78ea75ad45812214da368f7a2b67e6 datapathConfiguration="&{false false false false false }" interface=lxc8b8ec67858dd k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-gw8hb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a7f16ee0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2025 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-gw8hb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a7f16ee0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2025 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-gw8hb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9a7f16ee0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2025 identity=4106 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-gw8hb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a7f16ee0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2025 identity=4106 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-gw8hb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a7f16ee0f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2025 identity=4106 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-gw8hb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a7f16ee0f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2025 identity=4106 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-gw8hb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.173 3026d59c-f99b-4aff-b41a-c803d3f84c52 default }" containerID=fae59957df2b36fed26c53ea43a03a539edae7f3caadca57e365e9beb44ba9f2 datapathConfiguration="&{false false false false false }" interface=lxcd10fa37f942a k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vb5s4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fae59957df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vb5s4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fae59957df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vb5s4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fae59957df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 identity=7159 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vb5s4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fae59957df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 identity=7159 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vb5s4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fae59957df datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2800 identity=7159 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vb5s4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fae59957df datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2800 identity=7159 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vb5s4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.31 f6236451-920f-4256-a1aa-1a007b4abdd7 default }" containerID=d11d79a3704b2d631c700ca9d635beff20d26579dd1af51e340385537cdbd4a6 datapathConfiguration="&{false false false false false }" interface=lxc223199881c1c k8sPodName=openstack/pxc-operator-69cb5bbdb9-pzj47 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d11d79a370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pzj47 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d11d79a370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pzj47 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d11d79a370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=26744 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pzj47 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d11d79a370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=26744 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pzj47 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d11d79a370 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=252 identity=26744 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pzj47 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d11d79a370 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=252 identity=26744 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pzj47 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.167 2fc9ce3e-5050-4776-bd43-e56763b81115 default }" containerID=64b4161e7163a088521b167026e4a3f1a1a3920d1f60248b0e1cde9bd87822cf datapathConfiguration="&{false false false false false }" interface=lxca0c248f1bc06 k8sPodName=local-path-storage/helper-pod-create-pvc-644fadd8-ba90-4995-a9f2-4fc16a096598 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64b4161e71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1963 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-644fadd8-ba90-4995-a9f2-4fc16a096598 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64b4161e71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1963 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-644fadd8-ba90-4995-a9f2-4fc16a096598 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64b4161e71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1963 identity=37540 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-644fadd8-ba90-4995-a9f2-4fc16a096598 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64b4161e71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1963 identity=37540 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-644fadd8-ba90-4995-a9f2-4fc16a096598 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64b4161e71 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1963 identity=37540 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-644fadd8-ba90-4995-a9f2-4fc16a096598 subsys=endpoint level=info msg="Successful endpoint creation" containerID=64b4161e71 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1963 identity=37540 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-644fadd8-ba90-4995-a9f2-4fc16a096598 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.131 c20eb20f-ec4d-47f1-9673-516b2539589a default }" containerID=b240765b82df6243e3cc45a0f8da09c2c991b94ad9cba8e2c3585ea5949ed9cf datapathConfiguration="&{false false false false false }" interface=lxc0eb78954cc1a k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b240765b82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b240765b82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b240765b82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identity=53979 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b240765b82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identity=53979 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b240765b82 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2446 identity=53979 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b240765b82 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2446 identity=53979 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=64b4161e71 endpointID=1963 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-644fadd8-ba90-4995-a9f2-4fc16a096598 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=64b4161e71 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1963 identity=37540 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-644fadd8-ba90-4995-a9f2-4fc16a096598 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 9bf39940-c107-47f8-8605-92d156f6043a default }" containerID=a6a6cbbd4af5d6dedf6dfc1d2fb3b1df0bc3992058c59ab6b32afb54d90ba846 datapathConfiguration="&{false false false false false }" interface=lxc73b4b9277f04 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6a6cbbd4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6a6cbbd4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6a6cbbd4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identity=54492 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a6a6cbbd4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identity=54492 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6a6cbbd4a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1568 identity=54492 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6a6cbbd4a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1568 identity=54492 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=eb70a5d7-df11-4443-9738-d2576a7f5dbc] Description:}]" policyAddRequest=f0cfd8ec-bf83-4c35-bed7-9de31d0cf608 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=f0cfd8ec-bf83-4c35-bed7-9de31d0cf608 policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.15 16b13339-7fa7-4789-b410-a9c0fb344c13 default }" containerID=4443bdc4f2d090831884c21bc411c0dfc4d26458c3ab72715cbb8bb466f60c58 datapathConfiguration="&{false false false false false }" interface=lxc91c6bf1cb21d k8sPodName=local-path-storage/helper-pod-create-pvc-159a4543-2c2d-4f55-89ce-073cde446b2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4443bdc4f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 ipv4=10.0.0.15 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-159a4543-2c2d-4f55-89ce-073cde446b2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4443bdc4f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.15 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-159a4543-2c2d-4f55-89ce-073cde446b2b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4443bdc4f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identity=37540 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.15 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-159a4543-2c2d-4f55-89ce-073cde446b2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4443bdc4f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identity=37540 ipv4=10.0.0.15 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-159a4543-2c2d-4f55-89ce-073cde446b2b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4443bdc4f2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=897 identity=37540 ipv4=10.0.0.15 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-159a4543-2c2d-4f55-89ce-073cde446b2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=4443bdc4f2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=897 identity=37540 ipv4=10.0.0.15 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-159a4543-2c2d-4f55-89ce-073cde446b2b subsys=daemon level=info msg="Delete endpoint request" containerID=4443bdc4f2 endpointID=897 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-159a4543-2c2d-4f55-89ce-073cde446b2b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4443bdc4f2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=897 identity=37540 ipv4=10.0.0.15 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-159a4543-2c2d-4f55-89ce-073cde446b2b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 4555510e-d388-4909-920b-a67d9428251a default }" containerID=e13b7f8643e67c5a768106ae5231beb7a53115a8d620007b92af132a057cddb1 datapathConfiguration="&{false false false false false }" interface=lxc8fd1e7a3f394 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e13b7f8643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e13b7f8643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e13b7f8643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=38823 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e13b7f8643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=38823 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e13b7f8643 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=837 identity=38823 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e13b7f8643 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=837 identity=38823 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=f3640568-68ed-400d-be19-0ce61dc828bb] Description:}]" policyAddRequest=2c2eab55-04f0-4f6d-bac2-10c7bd7e225c subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=2c2eab55-04f0-4f6d-bac2-10c7bd7e225c policyRevision=5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.150 400f7eb7-f6b4-48ae-819b-9a74250d4dda default }" containerID=abac58c9c57bd502a066418be225b644df95a666d30dc5aa3ae7dc114b3b94da datapathConfiguration="&{false false false false false }" interface=lxcc605db4ee167 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abac58c9c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 ipv4=10.0.0.150 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abac58c9c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.150 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abac58c9c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 identity=56384 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.150 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abac58c9c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 identity=56384 ipv4=10.0.0.150 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abac58c9c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3381 identity=56384 ipv4=10.0.0.150 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abac58c9c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3381 identity=56384 ipv4=10.0.0.150 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008102587687854235 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.190 e9324884-d271-4fb6-8639-719054487f2b default }" containerID=9ea875b1cb6e3d62d34a236202befea1a3649aeb60ded50ccec22f6d517f7d93 datapathConfiguration="&{false false false false false }" interface=lxceffe3a7b0241 k8sPodName=monitoring/node-feature-discovery-worker-8n9nd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ea875b1cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8n9nd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 9b42b87b-1cf8-427a-a06f-fd4a94271e5b default }" containerID=9b2d6bf295903b4971553ca8e580f7757179bd48c1f4db278ff88a67eeae8fce datapathConfiguration="&{false false false false false }" interface=lxcb76d813e262c k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cls2f labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=9ea875b1cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8n9nd subsys=endpoint level=info msg="New endpoint" containerID=9b2d6bf295 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3223 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cls2f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=9b2d6bf295 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3223 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cls2f subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9b2d6bf295 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3223 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cls2f line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9ea875b1cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identity=14606 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8n9nd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ea875b1cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identity=14606 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8n9nd subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b2d6bf295 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3223 identity=7089 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cls2f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b2d6bf295 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3223 identity=7089 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cls2f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 2bfbc829-0964-4e7a-b0e4-74dd08fde4b0 default }" containerID=2334377c2003466dc7c4212441d1c96859a1cd637e76e522e240d50bc26812e9 datapathConfiguration="&{false false false false false }" interface=lxc0e49643ab779 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bt2zd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2334377c20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=910 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bt2zd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2334377c20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=910 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bt2zd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2334377c20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=910 identity=17617 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bt2zd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2334377c20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=910 identity=17617 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bt2zd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ea875b1cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1741 identity=14606 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8n9nd subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ea875b1cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1741 identity=14606 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8n9nd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9b2d6bf295 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3223 identity=7089 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cls2f subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b2d6bf295 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3223 identity=7089 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cls2f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2334377c20 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=910 identity=17617 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bt2zd subsys=endpoint level=info msg="Successful endpoint creation" containerID=2334377c20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=910 identity=17617 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bt2zd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 f644c896-00c5-43da-95b1-d7bb656269e9 default }" containerID=a23584a7a89dc72dbe1a1cea50944d00e433b21c335793be0f4663075d250e50 datapathConfiguration="&{false false false false false }" interface=lxc1159c7447cbf k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lrw2f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a23584a7a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 ipv4=10.0.0.84 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lrw2f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a23584a7a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.84 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lrw2f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a23584a7a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 identity=12839 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.84 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lrw2f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a23584a7a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 identity=12839 ipv4=10.0.0.84 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lrw2f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a23584a7a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=844 identity=12839 ipv4=10.0.0.84 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lrw2f subsys=endpoint level=info msg="Successful endpoint creation" containerID=a23584a7a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=844 identity=12839 ipv4=10.0.0.84 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lrw2f subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3083 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-181-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03083 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03083 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03083 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03083:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3083 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 2c152bd9-1f4e-4d30-aa88-5b63e617322a default }" containerID=d0842046368f4b62bb3d0affdcc5bdc6172685ef6a9ef86b72f353ab54634c93 datapathConfiguration="&{false false false false false }" interface=lxce63a581719fc k8sPodName=monitoring/kube-prometheus-stack-admission-create-hckfr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d084204636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hckfr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d084204636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=c39cab44-0504-4415-a810-3ddd92434e4b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c39cab44-0504-4415-a810-3ddd92434e4b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hckfr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c39cab44-0504-4415-a810-3ddd92434e4b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c39cab44-0504-4415-a810-3ddd92434e4b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d084204636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hckfr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d084204636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identity=62682 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=c39cab44-0504-4415-a810-3ddd92434e4b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c39cab44-0504-4415-a810-3ddd92434e4b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hckfr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d084204636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identity=62682 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hckfr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d084204636 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=463 identity=62682 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hckfr subsys=endpoint level=info msg="Successful endpoint creation" containerID=d084204636 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=463 identity=62682 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hckfr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d084204636 endpointID=463 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-hckfr subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c39cab44-0504-4415-a810-3ddd92434e4b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c39cab44-0504-4415-a810-3ddd92434e4b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d084204636 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=463 identity=62682 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hckfr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 981c7846-4183-405f-a5f9-e3b19aac048b default }" containerID=36af56995f228bdb5219a372178a15cdcdf38b1f66b5a5659c3aecef4f62b12a datapathConfiguration="&{false false false false false }" interface=lxc84f840d3f548 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vh75b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36af56995f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vh75b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36af56995f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vh75b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.157 0049e18e-273a-4010-a78f-6e9761b5c97e default }" containerID=0f3a27ba7120264a53ea7f85a9601b0ee49b1dbb901d6736417b2e27f1a208ab datapathConfiguration="&{false false false false false }" interface=lxc2a50589ad659 k8sPodName=monitoring/kube-prometheus-stack-grafana-7f96f5c85b-fx5lj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f3a27ba71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f96f5c85b-fx5lj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f3a27ba71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f96f5c85b-fx5lj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=36af56995f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vh75b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0f3a27ba71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f96f5c85b-fx5lj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=36af56995f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 identity=26874 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vh75b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36af56995f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 identity=26874 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vh75b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f3a27ba71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=15006 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f96f5c85b-fx5lj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f3a27ba71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=15006 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f96f5c85b-fx5lj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 f7b8e22f-1d24-4c57-975f-93442ce4b06a default }" containerID=635f62c627a9212b5c758ef0d210f0649e95395bafd8b387dac13b0201fa9161 datapathConfiguration="&{false false false false false }" interface=lxc2a683b09e978 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bj246 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=635f62c627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bj246 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=635f62c627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bj246 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=635f62c627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 identity=47936 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bj246 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=635f62c627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 identity=47936 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bj246 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36af56995f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=749 identity=26874 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vh75b subsys=endpoint level=info msg="Successful endpoint creation" containerID=36af56995f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=749 identity=26874 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vh75b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0f3a27ba71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2189 identity=15006 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f96f5c85b-fx5lj subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f3a27ba71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2189 identity=15006 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f96f5c85b-fx5lj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=635f62c627 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3408 identity=47936 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bj246 subsys=endpoint level=info msg="Successful endpoint creation" containerID=635f62c627 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3408 identity=47936 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bj246 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.177 40cf65b1-8ed0-45c6-828b-344370ee368c default }" containerID=d4c6db09c68fb22120695525e402baa93ad24b7351ede9eee3a44887f87b68b7 datapathConfiguration="&{false false false false false }" interface=lxc0c02ca69d5ff k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nxkvz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4c6db09c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nxkvz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4c6db09c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=113afd69-4152-4b4b-9777-1f11a8831963,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=113afd69-4152-4b4b-9777-1f11a8831963,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nxkvz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=113afd69-4152-4b4b-9777-1f11a8831963;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=113afd69-4152-4b4b-9777-1f11a8831963;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4c6db09c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 identity=24269 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=113afd69-4152-4b4b-9777-1f11a8831963,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=113afd69-4152-4b4b-9777-1f11a8831963,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nxkvz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4c6db09c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 identity=24269 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nxkvz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4c6db09c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1048 identity=24269 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nxkvz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4c6db09c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1048 identity=24269 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nxkvz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 bfe1f490-6d26-46f5-93c0-d0a3f8f2bc02 default }" containerID=4cad287eaf5abd60424f4a2b5f4e94afb8ab8ead6901b90882318e76e374cd61 datapathConfiguration="&{false false false false false }" interface=lxcce17d2f5d59f k8sPodName=local-path-storage/helper-pod-create-pvc-d6d6dc89-8be3-413e-9c7f-89a35270b534 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cad287eaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1612 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6d6dc89-8be3-413e-9c7f-89a35270b534 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cad287eaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1612 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6d6dc89-8be3-413e-9c7f-89a35270b534 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4cad287eaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1612 identity=37540 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6d6dc89-8be3-413e-9c7f-89a35270b534 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cad287eaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1612 identity=37540 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6d6dc89-8be3-413e-9c7f-89a35270b534 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cad287eaf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1612 identity=37540 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6d6dc89-8be3-413e-9c7f-89a35270b534 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cad287eaf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1612 identity=37540 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6d6dc89-8be3-413e-9c7f-89a35270b534 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 b736e7da-1008-4597-9cf1-ff2f90650cef default }" containerID=5ec225bcd94eb944e19154f4a93be0dc20f3638e9319af92c8260ad27800e9b1 datapathConfiguration="&{false false false false false }" interface=lxceeab62a1ebfa k8sPodName=local-path-storage/helper-pod-create-pvc-630a9374-c912-4329-8743-53bda5fa5ec6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ec225bcd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2554 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-630a9374-c912-4329-8743-53bda5fa5ec6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ec225bcd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2554 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-630a9374-c912-4329-8743-53bda5fa5ec6 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5ec225bcd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2554 identity=37540 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-630a9374-c912-4329-8743-53bda5fa5ec6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ec225bcd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2554 identity=37540 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-630a9374-c912-4329-8743-53bda5fa5ec6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ec225bcd9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2554 identity=37540 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-630a9374-c912-4329-8743-53bda5fa5ec6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ec225bcd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2554 identity=37540 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-630a9374-c912-4329-8743-53bda5fa5ec6 subsys=daemon level=info msg="Delete endpoint request" containerID=d4c6db09c6 endpointID=1048 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-nxkvz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=113afd69-4152-4b4b-9777-1f11a8831963 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=113afd69-4152-4b4b-9777-1f11a8831963 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d4c6db09c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1048 identity=24269 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nxkvz subsys=endpoint level=info msg="Delete endpoint request" containerID=5ec225bcd9 endpointID=2554 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-630a9374-c912-4329-8743-53bda5fa5ec6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=4cad287eaf endpointID=1612 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d6d6dc89-8be3-413e-9c7f-89a35270b534 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5ec225bcd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2554 identity=37540 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-630a9374-c912-4329-8743-53bda5fa5ec6 subsys=endpoint level=info msg="Removed endpoint" containerID=4cad287eaf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1612 identity=37540 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6d6dc89-8be3-413e-9c7f-89a35270b534 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 d89485dd-be6c-4502-9cf3-2e44d79502fe default }" containerID=dd6c181821909bd4932eaaafa87cec643cfa0390fd953900197c4edcdbf2fcb5 datapathConfiguration="&{false false false false false }" interface=lxca447d5ed11eb k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd6c181821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3058 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd6c181821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3058 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dd6c181821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3058 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd6c181821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3058 identity=3354 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd6c181821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3058 identity=3354 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd6c181821 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3058 identity=3354 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd6c181821 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3058 identity=3354 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.63 df5464db-b6a8-47c4-9836-aff1f1ac8b4f default }" containerID=c51022d5ab6f09621dada3569add06f54687dc496a77880c12a5c2f00a79a9fd datapathConfiguration="&{false false false false false }" interface=lxc64ef92c7483a k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c51022d5ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c51022d5ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c51022d5ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=9844 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c51022d5ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=9844 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c51022d5ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=107 identity=9844 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c51022d5ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=107 identity=9844 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.164 3ae5dc5c-22cd-4714-a1ea-32e8209bab68 default }" containerID=4314a7c1dfd7db41055062cf1a0f3c1a35ffb6a24f60ca372970ee3b1629199e datapathConfiguration="&{false false false false false }" interface=lxcb0d296922706 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4314a7c1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2431 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4314a7c1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2431 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4314a7c1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2431 identity=3755 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4314a7c1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2431 identity=3755 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 6debbfd9-9713-46af-be0f-bd6c005e3b4d default }" containerID=ffe382ba4b0d616d7e466953481c85a0667fce1ca904527264453b5945a68d95 datapathConfiguration="&{false false false false false }" interface=lxc2d6d573109d6 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffe382ba4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffe382ba4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ffe382ba4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=8553 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffe382ba4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=8553 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 ad10b18d-7a40-4b1f-9def-6cd406268175 default }" containerID=b1b0c8b13b064d21715647e61ce5f13e26b646db126cafcbda5e2c7c60551232 datapathConfiguration="&{false false false false false }" interface=lxc863c73b7ea82 k8sPodName=monitoring/loki-gateway-cf54cb88c-9t7wn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1b0c8b13b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1879 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9t7wn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1b0c8b13b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1879 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9t7wn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b1b0c8b13b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1879 identity=13202 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9t7wn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1b0c8b13b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1879 identity=13202 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9t7wn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4314a7c1df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2431 identity=3755 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4314a7c1df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2431 identity=3755 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ffe382ba4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1564 identity=8553 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffe382ba4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1564 identity=8553 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b1b0c8b13b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1879 identity=13202 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9t7wn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1b0c8b13b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1879 identity=13202 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9t7wn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.235 ff44d0a9-1f81-44e0-9da6-3271b2b503a8 default }" containerID=8e6add61d728b50b1c1742f60ceb9df31df602b456205ec517471aa87d101fe5 datapathConfiguration="&{false false false false false }" interface=lxcebf559e5cdb9 k8sPodName=local-path-storage/helper-pod-create-pvc-2e3259e3-f4b6-4308-8ba6-6624f2777ac8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e6add61d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3610 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e3259e3-f4b6-4308-8ba6-6624f2777ac8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e6add61d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e3259e3-f4b6-4308-8ba6-6624f2777ac8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e6add61d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3610 identity=37540 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e3259e3-f4b6-4308-8ba6-6624f2777ac8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e6add61d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3610 identity=37540 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e3259e3-f4b6-4308-8ba6-6624f2777ac8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e6add61d7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3610 identity=37540 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e3259e3-f4b6-4308-8ba6-6624f2777ac8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e6add61d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3610 identity=37540 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e3259e3-f4b6-4308-8ba6-6624f2777ac8 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.2 5ea05f3c-2f03-4315-9c7f-c616655e8dcd default }" containerID=c255889f23fe2546a3538cd2b3dca9909ce6c30cedbeb32480fa994f8a834659 datapathConfiguration="&{false false false false false }" interface=lxcac4f8ebc6d4d k8sPodName=monitoring/vector-v265g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c255889f23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/vector-v265g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c255889f23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/vector-v265g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c255889f23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 identity=15090 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/vector-v265g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c255889f23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 identity=15090 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/vector-v265g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c255889f23 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1476 identity=15090 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/vector-v265g subsys=endpoint level=info msg="Successful endpoint creation" containerID=c255889f23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1476 identity=15090 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/vector-v265g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e6add61d7 endpointID=3610 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2e3259e3-f4b6-4308-8ba6-6624f2777ac8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8e6add61d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3610 identity=37540 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e3259e3-f4b6-4308-8ba6-6624f2777ac8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 715b42cb-8db1-462f-82a3-ab6c28be340c default }" containerID=6632fc49b7b237302eed1af4221795210b88d31d743d85b23f4769681b05ea2a datapathConfiguration="&{false false false false false }" interface=lxc8afe04070b6f k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6632fc49b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3882 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6632fc49b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3882 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6632fc49b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3882 identity=19402 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6632fc49b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3882 identity=19402 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6632fc49b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3882 identity=19402 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6632fc49b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3882 identity=19402 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.20 39d8c8c3-a0aa-4d5a-a698-3e553b346e39 default }" containerID=c7898f4fa30694e221704c5fc61d906df848e3df209abbe4419ed38a43d1cb38 datapathConfiguration="&{false false false false false }" interface=lxc38015d2fe5fd k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cfms9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7898f4fa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cfms9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7898f4fa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cfms9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c7898f4fa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cfms9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7898f4fa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identity=14090 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cfms9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7898f4fa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identity=14090 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cfms9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7898f4fa3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1465 identity=14090 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cfms9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7898f4fa3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1465 identity=14090 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cfms9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.13 58fa8d2f-5b2e-42bc-a6ae-3f5d94e2a8da default }" containerID=c4d12d773e6df81e602ca747fe79c3d4a920dc7ad34208191a24eefb2a890a24 datapathConfiguration="&{false false false false false }" interface=lxcbf75f892662a k8sPodName=openstack/memcached-memcached-6479589586-pfhvn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4d12d773e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pfhvn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4d12d773e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pfhvn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c4d12d773e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pfhvn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4d12d773e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 identity=23047 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pfhvn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4d12d773e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 identity=23047 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pfhvn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c4d12d773e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1255 identity=23047 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pfhvn subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4d12d773e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1255 identity=23047 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pfhvn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.187 71d1e70c-f251-4800-bd7b-b5656893abaf default }" containerID=2bf00ea69615f5f2b9b3ea0bef4f4f2e1babdbd7ebdfc435591a81fc66b7f6a5 datapathConfiguration="&{false false false false false }" interface=lxc5342240b855a k8sPodName=local-path-storage/helper-pod-create-pvc-feb71cc3-46c1-465d-9551-7a55c4f47dc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bf00ea696 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-feb71cc3-46c1-465d-9551-7a55c4f47dc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bf00ea696 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-feb71cc3-46c1-465d-9551-7a55c4f47dc2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2bf00ea696 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=37540 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-feb71cc3-46c1-465d-9551-7a55c4f47dc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2bf00ea696 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=37540 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-feb71cc3-46c1-465d-9551-7a55c4f47dc2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2bf00ea696 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=356 identity=37540 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-feb71cc3-46c1-465d-9551-7a55c4f47dc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bf00ea696 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=356 identity=37540 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-feb71cc3-46c1-465d-9551-7a55c4f47dc2 subsys=daemon level=info msg="Delete endpoint request" containerID=2bf00ea696 endpointID=356 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-feb71cc3-46c1-465d-9551-7a55c4f47dc2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2bf00ea696 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=356 identity=37540 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-feb71cc3-46c1-465d-9551-7a55c4f47dc2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 74bd77a8-00c1-4715-bccc-40e233fb7385 default }" containerID=9cb92e375ded22b0f8db5f277b3818e611f813849929cf81164c0cb6bac2db6a datapathConfiguration="&{false false false false false }" interface=lxcfa631e6914cd k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9cb92e375d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9cb92e375d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9cb92e375d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identity=22114 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9cb92e375d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identity=22114 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9cb92e375d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=801 identity=22114 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9cb92e375d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=801 identity=22114 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.136 13428c2d-13ac-410b-b820-9f68a5a6600d default }" containerID=904f864ebb8356557985b26929c92b5a3cfab251d24e37da3af63fb77e37a200 datapathConfiguration="&{false false false false false }" interface=lxc4f69399e7bc5 k8sPodName=openstack/keystone-api-78b9fdf954-fjz4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=904f864ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-api-78b9fdf954-fjz4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=904f864ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-api-78b9fdf954-fjz4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=904f864ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-api-78b9fdf954-fjz4r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=904f864ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identity=30418 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-api-78b9fdf954-fjz4r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=904f864ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identity=30418 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-api-78b9fdf954-fjz4r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 72ed9f61-624c-4044-9670-8fe5032d0d6d default }" containerID=11719f24b7ea2ce0d4bceb0956480229bfef8f7cd78dd909624e070647efdc1f datapathConfiguration="&{false false false false false }" interface=lxccadbe22141f4 k8sPodName=openstack/keystone-credential-setup-w4nlf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11719f24b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-w4nlf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11719f24b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ce6a5780-28fd-46df-9c09-0381703cc43a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=ce6a5780-28fd-46df-9c09-0381703cc43a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-w4nlf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ce6a5780-28fd-46df-9c09-0381703cc43a;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=ce6a5780-28fd-46df-9c09-0381703cc43a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11719f24b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 identity=9811 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ce6a5780-28fd-46df-9c09-0381703cc43a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=ce6a5780-28fd-46df-9c09-0381703cc43a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-w4nlf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11719f24b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 identity=9811 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-w4nlf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=904f864ebb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=628 identity=30418 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-api-78b9fdf954-fjz4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=904f864ebb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=628 identity=30418 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-api-78b9fdf954-fjz4r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=11719f24b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2083 identity=9811 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-w4nlf subsys=endpoint level=info msg="Successful endpoint creation" containerID=11719f24b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2083 identity=9811 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-w4nlf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=11719f24b7 endpointID=2083 k8sNamespace=openstack k8sPodName=keystone-credential-setup-w4nlf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ce6a5780-28fd-46df-9c09-0381703cc43a k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=ce6a5780-28fd-46df-9c09-0381703cc43a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=11719f24b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2083 identity=9811 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-w4nlf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 be1c3016-22ae-435c-aa67-c012edaa380d default }" containerID=1bdacecf765a388446e819886b1a1555a5fe3ae4a397bb68025b880b7df6de5e datapathConfiguration="&{false false false false false }" interface=lxcffda381d1137 k8sPodName=openstack/keystone-db-init-9g6nr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bdacecf76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-9g6nr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bdacecf76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e3c811c6-b205-4bc4-96bd-ddce511a85b8,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=e3c811c6-b205-4bc4-96bd-ddce511a85b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-9g6nr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e3c811c6-b205-4bc4-96bd-ddce511a85b8;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=e3c811c6-b205-4bc4-96bd-ddce511a85b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bdacecf76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=12189 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e3c811c6-b205-4bc4-96bd-ddce511a85b8,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=e3c811c6-b205-4bc4-96bd-ddce511a85b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-9g6nr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bdacecf76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=12189 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-9g6nr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1bdacecf76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=46 identity=12189 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-9g6nr subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bdacecf76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=46 identity=12189 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-9g6nr subsys=daemon level=info msg="Delete endpoint request" containerID=1bdacecf76 endpointID=46 k8sNamespace=openstack k8sPodName=keystone-db-init-9g6nr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e3c811c6-b205-4bc4-96bd-ddce511a85b8 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=e3c811c6-b205-4bc4-96bd-ddce511a85b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1bdacecf76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=46 identity=12189 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-9g6nr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 e49770df-da8d-4a16-a9b1-09712bc3943a default }" containerID=a895d418277b954b57dabaa20f76ec5e4d13e68ccf7c2545463cc13ec2179fc8 datapathConfiguration="&{false false false false false }" interface=lxcda3cb45c9e80 k8sPodName=openstack/keystone-fernet-setup-2nqdz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a895d41827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3391 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-fernet-setup-2nqdz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a895d41827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3391 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2097d5d6-4e95-419c-8b3c-9e91322cd47c,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=2097d5d6-4e95-419c-8b3c-9e91322cd47c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-fernet-setup-2nqdz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2097d5d6-4e95-419c-8b3c-9e91322cd47c;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=2097d5d6-4e95-419c-8b3c-9e91322cd47c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a895d41827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3391 identity=17843 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2097d5d6-4e95-419c-8b3c-9e91322cd47c,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=2097d5d6-4e95-419c-8b3c-9e91322cd47c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-fernet-setup-2nqdz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a895d41827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3391 identity=17843 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-fernet-setup-2nqdz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a895d41827 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3391 identity=17843 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-fernet-setup-2nqdz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a895d41827 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3391 identity=17843 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-fernet-setup-2nqdz subsys=daemon level=info msg="Delete endpoint request" containerID=a895d41827 endpointID=3391 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-2nqdz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2097d5d6-4e95-419c-8b3c-9e91322cd47c k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=2097d5d6-4e95-419c-8b3c-9e91322cd47c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a895d41827 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3391 identity=17843 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-fernet-setup-2nqdz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 37af1650-ced7-4580-8277-0f01cfdc9048 default }" containerID=8b05aea94d8754e1df571afde65a7a29bc4d619f9434359e7e85d3e680486e19 datapathConfiguration="&{false false false false false }" interface=lxc5285e1ef10de k8sPodName=openstack/keystone-db-sync-jbt28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b05aea94d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=922 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-db-sync-jbt28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b05aea94d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=922 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4f51de32-fb61-4bee-a8c2-8f8b12909554,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4f51de32-fb61-4bee-a8c2-8f8b12909554,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-db-sync-jbt28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4f51de32-fb61-4bee-a8c2-8f8b12909554;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=4f51de32-fb61-4bee-a8c2-8f8b12909554;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b05aea94d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=922 identity=53126 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4f51de32-fb61-4bee-a8c2-8f8b12909554,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4f51de32-fb61-4bee-a8c2-8f8b12909554,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-db-sync-jbt28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b05aea94d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=922 identity=53126 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-db-sync-jbt28 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8b05aea94d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=922 identity=53126 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-db-sync-jbt28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b05aea94d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=922 identity=53126 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-db-sync-jbt28 subsys=daemon level=info msg="Delete endpoint request" containerID=8b05aea94d endpointID=922 k8sNamespace=openstack k8sPodName=keystone-db-sync-jbt28 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4f51de32-fb61-4bee-a8c2-8f8b12909554 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=4f51de32-fb61-4bee-a8c2-8f8b12909554 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8b05aea94d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=922 identity=53126 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-db-sync-jbt28 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 d09f7712-1299-4c34-acaf-8dd801127824 default }" containerID=870ea88cf954711a91e2e0eae69ed63b551519109ce65343fa4d95737971ed9d datapathConfiguration="&{false false false false false }" interface=lxc8fc030eeae2e k8sPodName=openstack/keystone-rabbit-init-mpllq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=870ea88cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-rabbit-init-mpllq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=870ea88cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1ba287b5-47c7-44e4-ad87-279eebf697bd,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1ba287b5-47c7-44e4-ad87-279eebf697bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-rabbit-init-mpllq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1ba287b5-47c7-44e4-ad87-279eebf697bd;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1ba287b5-47c7-44e4-ad87-279eebf697bd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=870ea88cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identity=21411 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1ba287b5-47c7-44e4-ad87-279eebf697bd,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1ba287b5-47c7-44e4-ad87-279eebf697bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-rabbit-init-mpllq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=870ea88cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identity=21411 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-rabbit-init-mpllq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=870ea88cf9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1757 identity=21411 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-rabbit-init-mpllq subsys=endpoint level=info msg="Successful endpoint creation" containerID=870ea88cf9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1757 identity=21411 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-rabbit-init-mpllq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=870ea88cf9 endpointID=1757 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-mpllq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1ba287b5-47c7-44e4-ad87-279eebf697bd k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1ba287b5-47c7-44e4-ad87-279eebf697bd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=870ea88cf9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1757 identity=21411 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-rabbit-init-mpllq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 893fb8b5-79e1-44be-bc9f-3cd8863eb55b default }" containerID=41fc88b4ec1bbf2c18c8e00b9a2ab30b8055a660bff30e6c6a2ef96c3e79848a datapathConfiguration="&{false false false false false }" interface=lxc253496386cc8 k8sPodName=openstack/keystone-domain-manage-scp6x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41fc88b4ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1652 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-domain-manage-scp6x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41fc88b4ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1652 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=878f55d9-5f5d-4c40-b7fb-6d1e05d0230f,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=878f55d9-5f5d-4c40-b7fb-6d1e05d0230f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-domain-manage-scp6x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=41fc88b4ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1652 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-domain-manage-scp6x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=878f55d9-5f5d-4c40-b7fb-6d1e05d0230f;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=878f55d9-5f5d-4c40-b7fb-6d1e05d0230f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41fc88b4ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1652 identity=4455 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=878f55d9-5f5d-4c40-b7fb-6d1e05d0230f,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=878f55d9-5f5d-4c40-b7fb-6d1e05d0230f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-domain-manage-scp6x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41fc88b4ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1652 identity=4455 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-domain-manage-scp6x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41fc88b4ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1652 identity=4455 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-domain-manage-scp6x subsys=endpoint level=info msg="Successful endpoint creation" containerID=41fc88b4ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1652 identity=4455 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-domain-manage-scp6x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41fc88b4ec endpointID=1652 k8sNamespace=openstack k8sPodName=keystone-domain-manage-scp6x subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=878f55d9-5f5d-4c40-b7fb-6d1e05d0230f k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=878f55d9-5f5d-4c40-b7fb-6d1e05d0230f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=41fc88b4ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1652 identity=4455 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-domain-manage-scp6x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 a6bbf5b8-1b05-47e8-ab67-a030f8d01939 default }" containerID=36d484f0f8ced7ac81f73a801fc49ba1acb6631110b76e49f399afe62d114064 datapathConfiguration="&{false false false false false }" interface=lxc7fe8ba178456 k8sPodName=openstack/keystone-bootstrap-rkm86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36d484f0f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-rkm86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36d484f0f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d10012cc-35e9-4317-acc0-ba41a01b34a8,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d10012cc-35e9-4317-acc0-ba41a01b34a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-rkm86 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=36d484f0f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-rkm86 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d10012cc-35e9-4317-acc0-ba41a01b34a8;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=d10012cc-35e9-4317-acc0-ba41a01b34a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36d484f0f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identity=8717 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d10012cc-35e9-4317-acc0-ba41a01b34a8,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d10012cc-35e9-4317-acc0-ba41a01b34a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-rkm86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36d484f0f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identity=8717 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-rkm86 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36d484f0f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=231 identity=8717 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-rkm86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=36d484f0f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=231 identity=8717 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-rkm86 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=36d484f0f8 endpointID=231 k8sNamespace=openstack k8sPodName=keystone-bootstrap-rkm86 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d10012cc-35e9-4317-acc0-ba41a01b34a8 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=d10012cc-35e9-4317-acc0-ba41a01b34a8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=36d484f0f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=231 identity=8717 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-rkm86 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 928cd029-63d7-41b1-9301-4193da54796f default }" containerID=2fe499726fec9022d1ecf5ad3fda9340d820339b768f6cc74932d491c501558a datapathConfiguration="&{false false false false false }" interface=lxc0d18c49fcb33 k8sPodName=local-path-storage/helper-pod-create-pvc-215c561b-f513-469d-a6f1-df3baa9677ac labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fe499726f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-215c561b-f513-469d-a6f1-df3baa9677ac subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fe499726f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-215c561b-f513-469d-a6f1-df3baa9677ac subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fe499726f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identity=37540 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-215c561b-f513-469d-a6f1-df3baa9677ac oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fe499726f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identity=37540 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-215c561b-f513-469d-a6f1-df3baa9677ac subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fe499726f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=328 identity=37540 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-215c561b-f513-469d-a6f1-df3baa9677ac subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fe499726f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=328 identity=37540 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-215c561b-f513-469d-a6f1-df3baa9677ac subsys=daemon level=info msg="Delete endpoint request" containerID=2fe499726f endpointID=328 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-215c561b-f513-469d-a6f1-df3baa9677ac subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2fe499726f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=328 identity=37540 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-215c561b-f513-469d-a6f1-df3baa9677ac subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 bb089ca2-cc9b-43ea-97d3-0da30af6e2c6 default }" containerID=6cb8dc936e2698c7748c7f424f6da8bf428fbaecdb70d0777168468f70f6415b datapathConfiguration="&{false false false false false }" interface=lxc0e8480585186 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cb8dc936e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cb8dc936e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cb8dc936e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identity=3686 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cb8dc936e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identity=3686 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6cb8dc936e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=977 identity=3686 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cb8dc936e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=977 identity=3686 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03549785599307425 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.158 2498bc69-7f93-4cd5-be59-99988663bf2f default }" containerID=097d8079ce72c7fe668e95acb115e5dc617364d0df2ca2c1df3a3845ed5b2dae datapathConfiguration="&{false false false false false }" interface=lxc8b8e83b4bd25 k8sPodName=openstack/barbican-api-f6678cb7c-6ml9f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=097d8079ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3974 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-api-f6678cb7c-6ml9f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=097d8079ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3974 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-api-f6678cb7c-6ml9f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=097d8079ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3974 identity=19619 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-api-f6678cb7c-6ml9f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=097d8079ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3974 identity=19619 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-api-f6678cb7c-6ml9f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.242 a2820939-bd6b-4e60-bd38-43cf6d037bb2 default }" containerID=3bcb42b14cea789336de621f106fb49e07de5915eab201076b15cbf712fe7e35 datapathConfiguration="&{false false false false false }" interface=lxc50a844f4b6ff k8sPodName=openstack/barbican-db-init-vkcgb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bcb42b14c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-db-init-vkcgb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bcb42b14c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=137eb748-7df0-4ae6-ba2d-e098f9f4239c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=137eb748-7df0-4ae6-ba2d-e098f9f4239c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-db-init-vkcgb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=137eb748-7df0-4ae6-ba2d-e098f9f4239c;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=137eb748-7df0-4ae6-ba2d-e098f9f4239c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bcb42b14c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=32513 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=137eb748-7df0-4ae6-ba2d-e098f9f4239c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=137eb748-7df0-4ae6-ba2d-e098f9f4239c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-db-init-vkcgb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bcb42b14c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=32513 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-db-init-vkcgb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=097d8079ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3974 identity=19619 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-api-f6678cb7c-6ml9f subsys=endpoint level=info msg="Successful endpoint creation" containerID=097d8079ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3974 identity=19619 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-api-f6678cb7c-6ml9f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3bcb42b14c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=367 identity=32513 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-db-init-vkcgb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bcb42b14c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=32513 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-db-init-vkcgb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3bcb42b14c endpointID=367 k8sNamespace=openstack k8sPodName=barbican-db-init-vkcgb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=137eb748-7df0-4ae6-ba2d-e098f9f4239c k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=137eb748-7df0-4ae6-ba2d-e098f9f4239c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3bcb42b14c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=32513 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-db-init-vkcgb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 3b1e759e-eb4d-4a1a-b7bb-71236dab6b5c default }" containerID=bfaa631cfce23b8073a10320aa791342c8db74f781be416b8f4761a0da330c95 datapathConfiguration="&{false false false false false }" interface=lxce82c5986c02d k8sPodName=openstack/barbican-db-sync-2lnxj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfaa631cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2508 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-db-sync-2lnxj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfaa631cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2508 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9afa7bb5-22b5-4b78-95d2-ef91d283a4f7,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9afa7bb5-22b5-4b78-95d2-ef91d283a4f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-db-sync-2lnxj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9afa7bb5-22b5-4b78-95d2-ef91d283a4f7;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=9afa7bb5-22b5-4b78-95d2-ef91d283a4f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfaa631cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2508 identity=18216 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9afa7bb5-22b5-4b78-95d2-ef91d283a4f7,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9afa7bb5-22b5-4b78-95d2-ef91d283a4f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-db-sync-2lnxj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfaa631cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2508 identity=18216 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-db-sync-2lnxj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bfaa631cfc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2508 identity=18216 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-db-sync-2lnxj subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfaa631cfc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2508 identity=18216 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-db-sync-2lnxj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bfaa631cfc endpointID=2508 k8sNamespace=openstack k8sPodName=barbican-db-sync-2lnxj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9afa7bb5-22b5-4b78-95d2-ef91d283a4f7 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=9afa7bb5-22b5-4b78-95d2-ef91d283a4f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bfaa631cfc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2508 identity=18216 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-db-sync-2lnxj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 b64bb100-724e-40b3-b64d-d96ed78c5383 default }" containerID=16e54edbff241f18fa19912960d6b4be75fa678909a835a0f54d04488856d567 datapathConfiguration="&{false false false false false }" interface=lxc7c584ab5a330 k8sPodName=openstack/barbican-rabbit-init-n4lld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16e54edbff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1881 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-rabbit-init-n4lld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16e54edbff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1881 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=15a6ab3b-5422-4a49-bca9-6b26bff27745,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=15a6ab3b-5422-4a49-bca9-6b26bff27745,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-rabbit-init-n4lld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=15a6ab3b-5422-4a49-bca9-6b26bff27745;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=15a6ab3b-5422-4a49-bca9-6b26bff27745;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=16e54edbff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1881 identity=32574 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=15a6ab3b-5422-4a49-bca9-6b26bff27745,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=15a6ab3b-5422-4a49-bca9-6b26bff27745,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-rabbit-init-n4lld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16e54edbff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1881 identity=32574 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-rabbit-init-n4lld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16e54edbff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1881 identity=32574 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-rabbit-init-n4lld subsys=endpoint level=info msg="Successful endpoint creation" containerID=16e54edbff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1881 identity=32574 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-rabbit-init-n4lld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=16e54edbff endpointID=1881 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-n4lld subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=15a6ab3b-5422-4a49-bca9-6b26bff27745 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=15a6ab3b-5422-4a49-bca9-6b26bff27745 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=16e54edbff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1881 identity=32574 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-rabbit-init-n4lld subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 1bbf895b-20ce-4b76-a739-128312c5ba18 default }" containerID=7b5bce08ab74fd59a0e443107d9e6b48291d6047b03e76b79c06c5d4da0e76fa datapathConfiguration="&{false false false false false }" interface=lxc2644b974e36e k8sPodName=openstack/barbican-ks-service-lqxg4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b5bce08ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3291 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-lqxg4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b5bce08ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3291 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=01791cb2-1325-4bb3-8133-38a04312d378,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=01791cb2-1325-4bb3-8133-38a04312d378,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-lqxg4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=01791cb2-1325-4bb3-8133-38a04312d378;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=01791cb2-1325-4bb3-8133-38a04312d378;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b5bce08ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3291 identity=49067 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=01791cb2-1325-4bb3-8133-38a04312d378,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=01791cb2-1325-4bb3-8133-38a04312d378,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-lqxg4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b5bce08ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3291 identity=49067 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-lqxg4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7b5bce08ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3291 identity=49067 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-lqxg4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b5bce08ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3291 identity=49067 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-lqxg4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7b5bce08ab endpointID=3291 k8sNamespace=openstack k8sPodName=barbican-ks-service-lqxg4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=01791cb2-1325-4bb3-8133-38a04312d378 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=01791cb2-1325-4bb3-8133-38a04312d378 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7b5bce08ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3291 identity=49067 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/barbican-ks-service-lqxg4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 b4ec75fa-c36f-4907-ba00-42e674b6afeb default }" containerID=a212ba5277a79529bd3974a977b826d85a678612a3a4678ffff3360731adb9db datapathConfiguration="&{false false false false false }" interface=lxcb0170d3b420d k8sPodName=openstack/barbican-ks-endpoints-4mh2n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a212ba5277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4mh2n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a212ba5277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cc34dcd3-ca48-488e-bc1f-8c853a4e6103,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cc34dcd3-ca48-488e-bc1f-8c853a4e6103,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4mh2n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a212ba5277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.34 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4mh2n line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cc34dcd3-ca48-488e-bc1f-8c853a4e6103;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=cc34dcd3-ca48-488e-bc1f-8c853a4e6103;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a212ba5277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=48324 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cc34dcd3-ca48-488e-bc1f-8c853a4e6103,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cc34dcd3-ca48-488e-bc1f-8c853a4e6103,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4mh2n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a212ba5277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=48324 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4mh2n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a212ba5277 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=852 identity=48324 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4mh2n subsys=endpoint level=info msg="Successful endpoint creation" containerID=a212ba5277 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=852 identity=48324 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4mh2n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a212ba5277 endpointID=852 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-4mh2n subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cc34dcd3-ca48-488e-bc1f-8c853a4e6103 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=cc34dcd3-ca48-488e-bc1f-8c853a4e6103 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a212ba5277 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=852 identity=48324 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4mh2n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 fdea46ef-2f40-4f80-916b-669a51ffbee1 default }" containerID=e856e0c2f07dd1a60bcfbf8fd97cefcce8296fb6a7f812284e48ab5fe917d72d datapathConfiguration="&{false false false false false }" interface=lxc1a842c15de8c k8sPodName=openstack/barbican-ks-user-xr9cz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e856e0c2f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-ks-user-xr9cz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e856e0c2f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b6b790e4-4264-44dc-978c-9f9b51869791,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b6b790e4-4264-44dc-978c-9f9b51869791,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-ks-user-xr9cz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b6b790e4-4264-44dc-978c-9f9b51869791;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=b6b790e4-4264-44dc-978c-9f9b51869791;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e856e0c2f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=2919 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b6b790e4-4264-44dc-978c-9f9b51869791,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b6b790e4-4264-44dc-978c-9f9b51869791,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-ks-user-xr9cz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e856e0c2f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=2919 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-ks-user-xr9cz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e856e0c2f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=382 identity=2919 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-ks-user-xr9cz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e856e0c2f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=382 identity=2919 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-ks-user-xr9cz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e856e0c2f0 endpointID=382 k8sNamespace=openstack k8sPodName=barbican-ks-user-xr9cz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b6b790e4-4264-44dc-978c-9f9b51869791 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=b6b790e4-4264-44dc-978c-9f9b51869791 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e856e0c2f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=382 identity=2919 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-ks-user-xr9cz subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.182 601037e2-70f7-47ae-b522-4d38579b0f4c default }" containerID=c0f9b21a37913318eb67c54cfc1ed923c1c6df96fa1f31df02a922a6e5ae3703 datapathConfiguration="&{false false false false false }" interface=lxc300b0ceb3c19 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cd8bg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0f9b21a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 ipv4=10.0.0.182 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cd8bg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0f9b21a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.182 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cd8bg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0f9b21a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 identity=24066 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.182 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cd8bg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0f9b21a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 identity=24066 ipv4=10.0.0.182 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cd8bg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c0f9b21a37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=607 identity=24066 ipv4=10.0.0.182 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cd8bg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0f9b21a37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=607 identity=24066 ipv4=10.0.0.182 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cd8bg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.212 83ad0026-8228-437e-ac2c-440f7a04d149 default }" containerID=c9f52b900229e08632cbdfb26495086484909e4de76acec09279838b92ea94f5 datapathConfiguration="&{false false false false false }" interface=lxc6f8579bbaaeb k8sPodName=openstack/rook-ceph-detect-version-8xmcn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9f52b9002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8xmcn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9f52b9002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c05b9e37-53bd-4474-8f00-4dac37baecf7,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c05b9e37-53bd-4474-8f00-4dac37baecf7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8xmcn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c9f52b9002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8xmcn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=c05b9e37-53bd-4474-8f00-4dac37baecf7;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=c05b9e37-53bd-4474-8f00-4dac37baecf7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9f52b9002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=43971 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c05b9e37-53bd-4474-8f00-4dac37baecf7,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c05b9e37-53bd-4474-8f00-4dac37baecf7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8xmcn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9f52b9002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=43971 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8xmcn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9f52b9002 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=501 identity=43971 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8xmcn subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9f52b9002 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=501 identity=43971 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8xmcn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c9f52b9002 endpointID=501 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-8xmcn subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=c05b9e37-53bd-4474-8f00-4dac37baecf7 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=c05b9e37-53bd-4474-8f00-4dac37baecf7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=c9f52b9002 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=501 identity=43971 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8xmcn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 b3b4392f-92e2-41c6-a12c-461d65ba8d40 default }" containerID=04ce4783fa32502e6b4293c49dea16544f8b7446cc60d6b1f7c7bb807993268f datapathConfiguration="&{false false false false false }" interface=lxcae98d913836a k8sPodName=openstack/ceph-object-controller-detect-version-kwm8n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04ce4783fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kwm8n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04ce4783fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=60cfbc30-9640-4a88-ab6d-9f7db4b561ce,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=60cfbc30-9640-4a88-ab6d-9f7db4b561ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kwm8n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=60cfbc30-9640-4a88-ab6d-9f7db4b561ce;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=60cfbc30-9640-4a88-ab6d-9f7db4b561ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04ce4783fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identity=64303 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=60cfbc30-9640-4a88-ab6d-9f7db4b561ce,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=60cfbc30-9640-4a88-ab6d-9f7db4b561ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kwm8n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04ce4783fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identity=64303 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kwm8n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04ce4783fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=301 identity=64303 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kwm8n subsys=endpoint level=info msg="Successful endpoint creation" containerID=04ce4783fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=301 identity=64303 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kwm8n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=04ce4783fa endpointID=301 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-kwm8n subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=60cfbc30-9640-4a88-ab6d-9f7db4b561ce k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=60cfbc30-9640-4a88-ab6d-9f7db4b561ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=04ce4783fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=301 identity=64303 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kwm8n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 a9dce700-80d9-4250-bb95-62fb3ff97b04 default }" containerID=8d2ae6489e49d89b52e41c20f0b5f45c6c9424301e9322ffb63d1697c224e16c datapathConfiguration="&{false false false false false }" interface=lxc38014aff4f00 k8sPodName=local-path-storage/helper-pod-create-pvc-a98aae5b-7a82-430b-8adb-db13a0b1b0f5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d2ae6489e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2927 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a98aae5b-7a82-430b-8adb-db13a0b1b0f5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d2ae6489e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2927 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a98aae5b-7a82-430b-8adb-db13a0b1b0f5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d2ae6489e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2927 identity=37540 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a98aae5b-7a82-430b-8adb-db13a0b1b0f5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d2ae6489e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2927 identity=37540 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a98aae5b-7a82-430b-8adb-db13a0b1b0f5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d2ae6489e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2927 identity=37540 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a98aae5b-7a82-430b-8adb-db13a0b1b0f5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d2ae6489e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2927 identity=37540 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a98aae5b-7a82-430b-8adb-db13a0b1b0f5 subsys=daemon level=info msg="Delete endpoint request" containerID=8d2ae6489e endpointID=2927 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a98aae5b-7a82-430b-8adb-db13a0b1b0f5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8d2ae6489e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2927 identity=37540 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a98aae5b-7a82-430b-8adb-db13a0b1b0f5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 f8de1c71-9ccc-4cba-b99f-ba4b523bc268 default }" containerID=6f97fd34ba5acd4d2687ab6c90669447e39ec9cc7f6e1cc451125b3edac22abd datapathConfiguration="&{false false false false false }" interface=lxc3f4df57d8988 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f97fd34ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f97fd34ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6f97fd34ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f97fd34ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 identity=54842 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f97fd34ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 identity=54842 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f97fd34ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2385 identity=54842 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f97fd34ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2385 identity=54842 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.228 f3dfcd5c-ed0b-457f-8043-c77cabb1bceb default }" containerID=bbca408bc9671e6695139c1c3f97d114b81acc7f0a1b691cc497368b71889351 datapathConfiguration="&{false false false false false }" interface=lxcc186053fd562 k8sPodName=openstack/glance-db-init-f4qlx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbca408bc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-db-init-f4qlx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbca408bc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4d6aeb58-1246-4a0f-abc7-e9e24c5d09d5,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=4d6aeb58-1246-4a0f-abc7-e9e24c5d09d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-db-init-f4qlx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4d6aeb58-1246-4a0f-abc7-e9e24c5d09d5;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=4d6aeb58-1246-4a0f-abc7-e9e24c5d09d5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bbca408bc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 identity=9747 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4d6aeb58-1246-4a0f-abc7-e9e24c5d09d5,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=4d6aeb58-1246-4a0f-abc7-e9e24c5d09d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-db-init-f4qlx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bbca408bc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 identity=9747 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-db-init-f4qlx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bbca408bc9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2387 identity=9747 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-db-init-f4qlx subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbca408bc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2387 identity=9747 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-db-init-f4qlx subsys=daemon level=info msg="Delete endpoint request" containerID=bbca408bc9 endpointID=2387 k8sNamespace=openstack k8sPodName=glance-db-init-f4qlx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4d6aeb58-1246-4a0f-abc7-e9e24c5d09d5 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=4d6aeb58-1246-4a0f-abc7-e9e24c5d09d5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bbca408bc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2387 identity=9747 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-db-init-f4qlx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 863d2d78-79c6-41b2-9902-5fe2d35fdcc7 default }" containerID=94f04f148fc8f2290bb0fbf455e1603af1d37cf5856df8922f938bb2538aefe0 datapathConfiguration="&{false false false false false }" interface=lxc35332907c77e k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lrtv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94f04f148f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3240 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lrtv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94f04f148f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3240 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lrtv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.165 b4c2330e-27ff-4221-81cf-d3c3b4b985ab default }" containerID=b797af3f6ca3f5825191c3d7ae4f92d91e88f458bd89c5f80b447789d2e2635e datapathConfiguration="&{false false false false false }" interface=lxcce492f5885b7 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-28lbp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b797af3f6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-28lbp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b797af3f6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-28lbp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=94f04f148f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3240 identity=62933 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lrtv6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94f04f148f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3240 identity=62933 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lrtv6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b797af3f6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identity=28695 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-28lbp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b797af3f6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identity=28695 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-28lbp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=94f04f148f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3240 identity=62933 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lrtv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94f04f148f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3240 identity=62933 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lrtv6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b797af3f6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1310 identity=28695 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-28lbp subsys=endpoint level=info msg="Successful endpoint creation" containerID=b797af3f6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1310 identity=28695 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-28lbp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.76 e4393fa1-2476-4366-9c96-537b36ca3da7 default }" containerID=840d968315313e7d60b015cffadf0080eb60260260822463741e0531c5d78fb2 datapathConfiguration="&{false false false false false }" interface=lxca1b5b20a026e k8sPodName=openstack/glance-db-sync-kls4q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=840d968315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-kls4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=840d968315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=492010fd-4d82-411e-990f-105da66ab6af,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=492010fd-4d82-411e-990f-105da66ab6af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-kls4q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=840d968315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-kls4q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=492010fd-4d82-411e-990f-105da66ab6af;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=492010fd-4d82-411e-990f-105da66ab6af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=840d968315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=10727 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=492010fd-4d82-411e-990f-105da66ab6af,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=492010fd-4d82-411e-990f-105da66ab6af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-kls4q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=840d968315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=10727 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-kls4q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=840d968315 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=324 identity=10727 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-kls4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=840d968315 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=324 identity=10727 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-kls4q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=840d968315 endpointID=324 k8sNamespace=openstack k8sPodName=glance-db-sync-kls4q subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=492010fd-4d82-411e-990f-105da66ab6af k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=492010fd-4d82-411e-990f-105da66ab6af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=840d968315 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=324 identity=10727 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-kls4q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 538d061a-4277-4462-9e0a-67ebe8c49183 default }" containerID=43e336bfcfb1b88d3843a2365a965aa877d1a31b0a2a37197b91d4f5ac4c7a8f datapathConfiguration="&{false false false false false }" interface=lxc167c16526c3f k8sPodName=openstack/glance-rabbit-init-6wc6h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43e336bfcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1485 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-rabbit-init-6wc6h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43e336bfcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1485 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d5e813bd-3e2a-4880-a13b-2152a1dd9312,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d5e813bd-3e2a-4880-a13b-2152a1dd9312,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-rabbit-init-6wc6h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d5e813bd-3e2a-4880-a13b-2152a1dd9312;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d5e813bd-3e2a-4880-a13b-2152a1dd9312;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43e336bfcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1485 identity=4355 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d5e813bd-3e2a-4880-a13b-2152a1dd9312,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d5e813bd-3e2a-4880-a13b-2152a1dd9312,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-rabbit-init-6wc6h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43e336bfcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1485 identity=4355 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-rabbit-init-6wc6h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=43e336bfcf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1485 identity=4355 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-rabbit-init-6wc6h subsys=endpoint level=info msg="Successful endpoint creation" containerID=43e336bfcf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1485 identity=4355 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-rabbit-init-6wc6h subsys=daemon level=info msg="Delete endpoint request" containerID=43e336bfcf endpointID=1485 k8sNamespace=openstack k8sPodName=glance-rabbit-init-6wc6h subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d5e813bd-3e2a-4880-a13b-2152a1dd9312 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d5e813bd-3e2a-4880-a13b-2152a1dd9312 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=43e336bfcf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1485 identity=4355 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-rabbit-init-6wc6h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 a1eb709d-ad09-493c-8a09-871563e29566 default }" containerID=9c48a306f5589ab1c0061f6323a9b12347c8dee777d793921d0906cc49b6d64e datapathConfiguration="&{false false false false false }" interface=lxcf885205d2848 k8sPodName=openstack/glance-ks-service-qhkz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c48a306f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-service-qhkz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c48a306f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=220a6220-cc66-444a-881a-fd40d4cef000,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=220a6220-cc66-444a-881a-fd40d4cef000,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-service-qhkz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=220a6220-cc66-444a-881a-fd40d4cef000;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=220a6220-cc66-444a-881a-fd40d4cef000;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c48a306f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=1768 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=220a6220-cc66-444a-881a-fd40d4cef000,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=220a6220-cc66-444a-881a-fd40d4cef000,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-service-qhkz9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c48a306f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=1768 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-service-qhkz9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c48a306f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=228 identity=1768 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-service-qhkz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c48a306f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=228 identity=1768 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-service-qhkz9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9c48a306f5 endpointID=228 k8sNamespace=openstack k8sPodName=glance-ks-service-qhkz9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=220a6220-cc66-444a-881a-fd40d4cef000 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=220a6220-cc66-444a-881a-fd40d4cef000 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9c48a306f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=228 identity=1768 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-service-qhkz9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 32a5bfde-f7af-49b8-abf9-dfac8765e269 default }" containerID=ef8b258033a99e40c98420d630fa45abfc60ddb73ab6daa48d223dcff28b3b31 datapathConfiguration="&{false false false false false }" interface=lxc2ee7678ee70b k8sPodName=openstack/glance-ks-endpoints-f9qdh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef8b258033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2402 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-endpoints-f9qdh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef8b258033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2402 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4c0f08b8-18d9-45f9-9030-605296eda25d,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4c0f08b8-18d9-45f9-9030-605296eda25d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-endpoints-f9qdh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ef8b258033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2402 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-endpoints-f9qdh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4c0f08b8-18d9-45f9-9030-605296eda25d;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=4c0f08b8-18d9-45f9-9030-605296eda25d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef8b258033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2402 identity=22898 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4c0f08b8-18d9-45f9-9030-605296eda25d,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4c0f08b8-18d9-45f9-9030-605296eda25d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-endpoints-f9qdh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef8b258033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2402 identity=22898 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-endpoints-f9qdh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef8b258033 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2402 identity=22898 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-endpoints-f9qdh subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef8b258033 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2402 identity=22898 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-endpoints-f9qdh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef8b258033 endpointID=2402 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-f9qdh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4c0f08b8-18d9-45f9-9030-605296eda25d k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=4c0f08b8-18d9-45f9-9030-605296eda25d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ef8b258033 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2402 identity=22898 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-endpoints-f9qdh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 b288faea-63a9-4341-84a1-bf553c363c9e default }" containerID=e26b68a24512872a787300140ca6803799ecb2f0d14c90e663667c8c4478abaa datapathConfiguration="&{false false false false false }" interface=lxc339a1a57b0d9 k8sPodName=openstack/glance-ks-user-ln476 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e26b68a245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-ln476 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e26b68a245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5c00fb89-cf14-43b3-96f1-ca446f18830a,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=5c00fb89-cf14-43b3-96f1-ca446f18830a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-ln476 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e26b68a245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-ln476 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5c00fb89-cf14-43b3-96f1-ca446f18830a;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=5c00fb89-cf14-43b3-96f1-ca446f18830a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e26b68a245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=26873 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5c00fb89-cf14-43b3-96f1-ca446f18830a,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=5c00fb89-cf14-43b3-96f1-ca446f18830a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-ln476 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e26b68a245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=26873 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-ln476 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e26b68a245 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=279 identity=26873 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-ln476 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e26b68a245 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=279 identity=26873 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-ln476 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e26b68a245 endpointID=279 k8sNamespace=openstack k8sPodName=glance-ks-user-ln476 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5c00fb89-cf14-43b3-96f1-ca446f18830a k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=5c00fb89-cf14-43b3-96f1-ca446f18830a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e26b68a245 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=279 identity=26873 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-ln476 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 fac6b52b-9b18-40dd-b3b2-8c556bcafc81 default }" containerID=fc8fb4f2b301b289fc45935361a274337c3905f26e9e0bc7655450b5dabbe7d6 datapathConfiguration="&{false false false false false }" interface=lxc45cc940028c2 k8sPodName=openstack/glance-metadefs-load-2d66w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc8fb4f2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-2d66w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc8fb4f2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d6f28a96-c7ae-4514-acbc-3f0dc2ad45ea,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=d6f28a96-c7ae-4514-acbc-3f0dc2ad45ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-2d66w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d6f28a96-c7ae-4514-acbc-3f0dc2ad45ea;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=d6f28a96-c7ae-4514-acbc-3f0dc2ad45ea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=fc8fb4f2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-2d66w line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fc8fb4f2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identity=3128 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d6f28a96-c7ae-4514-acbc-3f0dc2ad45ea,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=d6f28a96-c7ae-4514-acbc-3f0dc2ad45ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-2d66w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc8fb4f2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identity=3128 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-2d66w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc8fb4f2b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2084 identity=3128 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-2d66w subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc8fb4f2b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2084 identity=3128 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-2d66w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fc8fb4f2b3 endpointID=2084 k8sNamespace=openstack k8sPodName=glance-metadefs-load-2d66w subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d6f28a96-c7ae-4514-acbc-3f0dc2ad45ea k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=d6f28a96-c7ae-4514-acbc-3f0dc2ad45ea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fc8fb4f2b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2084 identity=3128 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-2d66w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 9a420cdc-a179-471b-b13d-308f96efe066 default }" containerID=3bee4a72e0cef0defde3cada4b4b2aaa4e179480f1df4c4ad7e57610a99f459c datapathConfiguration="&{false false false false false }" interface=lxce0370a9e2826 k8sPodName=openstack/glance-storage-init-wlt8b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bee4a72e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3148 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-storage-init-wlt8b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bee4a72e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3148 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6db1a384-2462-4d3d-884e-f3cfed9ffde6,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=6db1a384-2462-4d3d-884e-f3cfed9ffde6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-storage-init-wlt8b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6db1a384-2462-4d3d-884e-f3cfed9ffde6;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=6db1a384-2462-4d3d-884e-f3cfed9ffde6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bee4a72e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3148 identity=38106 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6db1a384-2462-4d3d-884e-f3cfed9ffde6,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=6db1a384-2462-4d3d-884e-f3cfed9ffde6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-storage-init-wlt8b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bee4a72e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3148 identity=38106 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-storage-init-wlt8b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3bee4a72e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3148 identity=38106 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-storage-init-wlt8b subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bee4a72e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3148 identity=38106 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-storage-init-wlt8b subsys=daemon level=info msg="Delete endpoint request" containerID=3bee4a72e0 endpointID=3148 k8sNamespace=openstack k8sPodName=glance-storage-init-wlt8b subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6db1a384-2462-4d3d-884e-f3cfed9ffde6 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=6db1a384-2462-4d3d-884e-f3cfed9ffde6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3bee4a72e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3148 identity=38106 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-storage-init-wlt8b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 bbd8bc17-22f9-4aee-b001-2b7914c2e75f default }" containerID=64fc0fa67a016bfc8f35682b088efe44cec932790b1ec24ecef4e57aaaa254a6 datapathConfiguration="&{false false false false false }" interface=lxca34e1e76ff89 k8sPodName=openstack/glance-api-76d4fd4765-qn7h7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64fc0fa67a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-api-76d4fd4765-qn7h7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64fc0fa67a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-api-76d4fd4765-qn7h7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64fc0fa67a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identity=59751 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-api-76d4fd4765-qn7h7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64fc0fa67a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identity=59751 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-api-76d4fd4765-qn7h7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=64fc0fa67a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=834 identity=59751 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-api-76d4fd4765-qn7h7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=64fc0fa67a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=834 identity=59751 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-api-76d4fd4765-qn7h7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.243 61f69dcb-947a-4605-8c74-f7816e128be4 default }" containerID=6bec38f0009ec98a82ee4c6c90e53bfa4f388aae90b785245664dd92d0ec6b51 datapathConfiguration="&{false false false false false }" interface=lxc78cbe6b72948 k8sPodName=openstack/staffeln-conductor-9cf95df7-nbv6d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bec38f000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-conductor-9cf95df7-nbv6d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bec38f000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-conductor-9cf95df7-nbv6d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bec38f000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identity=17598 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-conductor-9cf95df7-nbv6d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bec38f000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identity=17598 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-conductor-9cf95df7-nbv6d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.143 0485610e-b4ae-4527-99e9-cb8e6c6bb42f default }" containerID=1dad94fca4e7e607f560ec81facf423ae4695858d740afff0f88d1c391c14d44 datapathConfiguration="&{false false false false false }" interface=lxcbb813cf40cac k8sPodName=openstack/staffeln-db-init-4jstn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dad94fca4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/staffeln-db-init-4jstn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dad94fca4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8c6f048b-a622-4be1-93a6-c1cad6833ff6,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8c6f048b-a622-4be1-93a6-c1cad6833ff6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/staffeln-db-init-4jstn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.251 39ad59a4-9270-4c5b-a760-80c51d7e20ec default }" containerID=06b61ad42a79324595ae444d3a6a2b322c8ff275561f40d2336b21754419a1c5 datapathConfiguration="&{false false false false false }" interface=lxcad3d4acf4cf0 k8sPodName=openstack/staffeln-api-59c5b4db4b-88275 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06b61ad42a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/staffeln-api-59c5b4db4b-88275 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06b61ad42a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/staffeln-api-59c5b4db4b-88275 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=8c6f048b-a622-4be1-93a6-c1cad6833ff6;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=8c6f048b-a622-4be1-93a6-c1cad6833ff6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=1dad94fca4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identity=3567 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8c6f048b-a622-4be1-93a6-c1cad6833ff6,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8c6f048b-a622-4be1-93a6-c1cad6833ff6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/staffeln-db-init-4jstn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dad94fca4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identity=3567 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/staffeln-db-init-4jstn subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06b61ad42a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identity=48605 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/staffeln-api-59c5b4db4b-88275 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06b61ad42a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identity=48605 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/staffeln-api-59c5b4db4b-88275 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bec38f000 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1050 identity=17598 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-conductor-9cf95df7-nbv6d subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bec38f000 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1050 identity=17598 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-conductor-9cf95df7-nbv6d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1dad94fca4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2213 identity=3567 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/staffeln-db-init-4jstn subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dad94fca4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2213 identity=3567 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/staffeln-db-init-4jstn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=06b61ad42a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1386 identity=48605 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/staffeln-api-59c5b4db4b-88275 subsys=endpoint level=info msg="Successful endpoint creation" containerID=06b61ad42a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1386 identity=48605 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/staffeln-api-59c5b4db4b-88275 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1dad94fca4 endpointID=2213 k8sNamespace=openstack k8sPodName=staffeln-db-init-4jstn subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=8c6f048b-a622-4be1-93a6-c1cad6833ff6 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=8c6f048b-a622-4be1-93a6-c1cad6833ff6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=1dad94fca4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2213 identity=3567 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/staffeln-db-init-4jstn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 23d9953e-d318-4a87-8b0f-b4c98be8b7e8 default }" containerID=55d232fc06aedb495ef5ccef4832a775c0e61a95237211b627dd4101d4607b09 datapathConfiguration="&{false false false false false }" interface=lxc15c9bb039aa8 k8sPodName=openstack/staffeln-db-sync-gzfgw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55d232fc06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-gzfgw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55d232fc06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a65269e2-7da4-4450-af73-d3f689197c6c,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=a65269e2-7da4-4450-af73-d3f689197c6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-gzfgw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=a65269e2-7da4-4450-af73-d3f689197c6c;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=a65269e2-7da4-4450-af73-d3f689197c6c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55d232fc06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=25778 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a65269e2-7da4-4450-af73-d3f689197c6c,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=a65269e2-7da4-4450-af73-d3f689197c6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-gzfgw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55d232fc06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=25778 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-gzfgw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55d232fc06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=381 identity=25778 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-gzfgw subsys=endpoint level=info msg="Successful endpoint creation" containerID=55d232fc06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=381 identity=25778 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-gzfgw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=55d232fc06 endpointID=381 k8sNamespace=openstack k8sPodName=staffeln-db-sync-gzfgw subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=a65269e2-7da4-4450-af73-d3f689197c6c k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=a65269e2-7da4-4450-af73-d3f689197c6c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=55d232fc06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=381 identity=25778 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-gzfgw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 dc0ee7b5-04fb-4dd1-a274-da6a23b1044a default }" containerID=b03c43ad23e7c07f6f3d014d0c6f80388d71002bc19e49fc77883986a0bf1641 datapathConfiguration="&{false false false false false }" interface=lxc65c7c1411b51 k8sPodName=local-path-storage/helper-pod-create-pvc-3a3f3bf4-a8ae-4b58-9f63-c5f55f400047 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b03c43ad23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2755 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3a3f3bf4-a8ae-4b58-9f63-c5f55f400047 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b03c43ad23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2755 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3a3f3bf4-a8ae-4b58-9f63-c5f55f400047 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b03c43ad23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2755 identity=37540 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3a3f3bf4-a8ae-4b58-9f63-c5f55f400047 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b03c43ad23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2755 identity=37540 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3a3f3bf4-a8ae-4b58-9f63-c5f55f400047 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b03c43ad23 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2755 identity=37540 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3a3f3bf4-a8ae-4b58-9f63-c5f55f400047 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b03c43ad23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2755 identity=37540 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3a3f3bf4-a8ae-4b58-9f63-c5f55f400047 subsys=daemon level=info msg="Delete endpoint request" containerID=b03c43ad23 endpointID=2755 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3a3f3bf4-a8ae-4b58-9f63-c5f55f400047 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b03c43ad23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2755 identity=37540 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3a3f3bf4-a8ae-4b58-9f63-c5f55f400047 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 d8635c3e-dd3c-40e6-bb62-93e8464e4d16 default }" containerID=de6b873e4fe9d47f6d5e64de3d3563470bc7a923e5ef8b953be2407bb0587b19 datapathConfiguration="&{false false false false false }" interface=lxcb7a356a57a44 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de6b873e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de6b873e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de6b873e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identity=24246 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de6b873e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identity=24246 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=de6b873e4f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3892 identity=24246 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de6b873e4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3892 identity=24246 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.214 309e20a6-f2e4-49bb-b293-2743f90d757b default }" containerID=7d5c3220e61464d26d8046223f852116b2b751ab1efe3d58e9ef800706551404 datapathConfiguration="&{false false false false false }" interface=lxc6d152dc976d5 k8sPodName=openstack/cinder-api-6767f9d898-vphmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d5c3220e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/cinder-api-6767f9d898-vphmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d5c3220e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/cinder-api-6767f9d898-vphmg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d5c3220e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=18930 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/cinder-api-6767f9d898-vphmg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d5c3220e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=18930 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/cinder-api-6767f9d898-vphmg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.39 57e2a610-38e6-4fdf-b5e0-96b2b7af7026 default }" containerID=3ec514836820cf5f8b72a7d45b3192d705f81dcfdae8c6f2d0a8328c618a75fa datapathConfiguration="&{false false false false false }" interface=lxc0fa85755d614 k8sPodName=openstack/cinder-scheduler-978644bd6-t7kxx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ec5148368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/cinder-scheduler-978644bd6-t7kxx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ec5148368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/cinder-scheduler-978644bd6-t7kxx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ec5148368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identity=12685 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/cinder-scheduler-978644bd6-t7kxx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ec5148368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identity=12685 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/cinder-scheduler-978644bd6-t7kxx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d5c3220e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1588 identity=18930 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/cinder-api-6767f9d898-vphmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d5c3220e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1588 identity=18930 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/cinder-api-6767f9d898-vphmg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.202 571c4f0f-e867-4bab-8325-8e7b92b2bf71 default }" containerID=358350ae8d5928b90b076f77e95a258f46161ae380788f87ab3623108f5ab71e datapathConfiguration="&{false false false false false }" interface=lxc007be19822f7 k8sPodName=openstack/cinder-db-init-jg8z4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=358350ae8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=920 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/cinder-db-init-jg8z4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=358350ae8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=920 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=acc2567a-2dce-4746-b166-85b6051c257b,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=acc2567a-2dce-4746-b166-85b6051c257b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/cinder-db-init-jg8z4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=acc2567a-2dce-4746-b166-85b6051c257b;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=acc2567a-2dce-4746-b166-85b6051c257b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=358350ae8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=920 identity=57098 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=acc2567a-2dce-4746-b166-85b6051c257b,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=acc2567a-2dce-4746-b166-85b6051c257b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/cinder-db-init-jg8z4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=358350ae8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=920 identity=57098 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/cinder-db-init-jg8z4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ec5148368 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=92 identity=12685 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/cinder-scheduler-978644bd6-t7kxx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ec5148368 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=92 identity=12685 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/cinder-scheduler-978644bd6-t7kxx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=358350ae8d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=920 identity=57098 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/cinder-db-init-jg8z4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=358350ae8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=920 identity=57098 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/cinder-db-init-jg8z4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=358350ae8d endpointID=920 k8sNamespace=openstack k8sPodName=cinder-db-init-jg8z4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=acc2567a-2dce-4746-b166-85b6051c257b k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=acc2567a-2dce-4746-b166-85b6051c257b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=358350ae8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=920 identity=57098 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/cinder-db-init-jg8z4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 92010fae-b5d8-4883-be98-1eedb807db30 default }" containerID=0ea662d5f2249d30926a8f0ff2a57e19f79d858811d59c145ed03cc21adfdb0f datapathConfiguration="&{false false false false false }" interface=lxcbdd4818e805d k8sPodName=openstack/cinder-db-sync-psrdr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ea662d5f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-db-sync-psrdr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ea662d5f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d2f2453b-8594-4c29-98ee-94c34813fdc2,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=d2f2453b-8594-4c29-98ee-94c34813fdc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-db-sync-psrdr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0ea662d5f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-db-sync-psrdr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d2f2453b-8594-4c29-98ee-94c34813fdc2;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=d2f2453b-8594-4c29-98ee-94c34813fdc2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ea662d5f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identity=40877 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d2f2453b-8594-4c29-98ee-94c34813fdc2,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=d2f2453b-8594-4c29-98ee-94c34813fdc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-db-sync-psrdr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ea662d5f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identity=40877 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-db-sync-psrdr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ea662d5f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2309 identity=40877 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-db-sync-psrdr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ea662d5f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2309 identity=40877 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-db-sync-psrdr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ea662d5f2 endpointID=2309 k8sNamespace=openstack k8sPodName=cinder-db-sync-psrdr subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d2f2453b-8594-4c29-98ee-94c34813fdc2 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=d2f2453b-8594-4c29-98ee-94c34813fdc2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0ea662d5f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2309 identity=40877 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/cinder-db-sync-psrdr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 d6efe492-646e-42b6-a3e1-0439884e664c default }" containerID=9f64ff705d7a671bb2e14d243af19d117a2553d6c49aca0d22fb48a34f0d9369 datapathConfiguration="&{false false false false false }" interface=lxc89a2513f65c2 k8sPodName=openstack/cinder-rabbit-init-2xx2g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f64ff705d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-rabbit-init-2xx2g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f64ff705d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d9d9f868-02b3-4acf-ac89-0ef5eff838e8,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d9d9f868-02b3-4acf-ac89-0ef5eff838e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-rabbit-init-2xx2g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d9d9f868-02b3-4acf-ac89-0ef5eff838e8;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d9d9f868-02b3-4acf-ac89-0ef5eff838e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f64ff705d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identity=32186 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d9d9f868-02b3-4acf-ac89-0ef5eff838e8,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d9d9f868-02b3-4acf-ac89-0ef5eff838e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-rabbit-init-2xx2g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f64ff705d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identity=32186 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-rabbit-init-2xx2g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9f64ff705d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1685 identity=32186 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-rabbit-init-2xx2g subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f64ff705d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1685 identity=32186 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-rabbit-init-2xx2g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f64ff705d endpointID=1685 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-2xx2g subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d9d9f868-02b3-4acf-ac89-0ef5eff838e8 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d9d9f868-02b3-4acf-ac89-0ef5eff838e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9f64ff705d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1685 identity=32186 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-rabbit-init-2xx2g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 7f8da749-de4d-4314-a2c4-4fee54b919da default }" containerID=a08d973b23891073da6cef458637f786fbb58ec5656be319335202ee232baaf3 datapathConfiguration="&{false false false false false }" interface=lxc8e3144a8d216 k8sPodName=openstack/cinder-ks-service-dz8td labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a08d973b23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-ks-service-dz8td subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a08d973b23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=23203323-79d3-4b71-88d4-5a5379bd5a4f,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=23203323-79d3-4b71-88d4-5a5379bd5a4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-ks-service-dz8td subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=23203323-79d3-4b71-88d4-5a5379bd5a4f;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=23203323-79d3-4b71-88d4-5a5379bd5a4f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a08d973b23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=18765 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=23203323-79d3-4b71-88d4-5a5379bd5a4f,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=23203323-79d3-4b71-88d4-5a5379bd5a4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-ks-service-dz8td oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a08d973b23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=18765 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-ks-service-dz8td subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a08d973b23 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=367 identity=18765 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-ks-service-dz8td subsys=endpoint level=info msg="Successful endpoint creation" containerID=a08d973b23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=18765 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-ks-service-dz8td subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a08d973b23 endpointID=367 k8sNamespace=openstack k8sPodName=cinder-ks-service-dz8td subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=23203323-79d3-4b71-88d4-5a5379bd5a4f k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=23203323-79d3-4b71-88d4-5a5379bd5a4f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=a08d973b23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=18765 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-ks-service-dz8td subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 5fb9daeb-fc5a-4965-81f9-230e88f7849e default }" containerID=36e15ea4a2964bf8c9737566894482b0ae273e2959ac371a5a8e41342a2e3a8b datapathConfiguration="&{false false false false false }" interface=lxc8ac83435bbf2 k8sPodName=openstack/cinder-ks-endpoints-mwptv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36e15ea4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mwptv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36e15ea4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f4ace336-c527-42fe-b928-010ff2b1e6d1,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f4ace336-c527-42fe-b928-010ff2b1e6d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mwptv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=36e15ea4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mwptv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=f4ace336-c527-42fe-b928-010ff2b1e6d1;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f4ace336-c527-42fe-b928-010ff2b1e6d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36e15ea4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identity=53204 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f4ace336-c527-42fe-b928-010ff2b1e6d1,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f4ace336-c527-42fe-b928-010ff2b1e6d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mwptv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36e15ea4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identity=53204 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mwptv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36e15ea4a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3345 identity=53204 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mwptv subsys=endpoint level=info msg="Successful endpoint creation" containerID=36e15ea4a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3345 identity=53204 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mwptv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=36e15ea4a2 endpointID=3345 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-mwptv subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=f4ace336-c527-42fe-b928-010ff2b1e6d1 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f4ace336-c527-42fe-b928-010ff2b1e6d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=36e15ea4a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3345 identity=53204 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mwptv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 fac38e2f-1573-4e11-a0d8-33de3437ce24 default }" containerID=8638d5f80a83fb30786b8f2e8bcb7152d9b24e54b623127775984e936d36cb36 datapathConfiguration="&{false false false false false }" interface=lxcceeceb8d29d8 k8sPodName=openstack/cinder-ks-user-9tnlh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8638d5f80a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1167 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/cinder-ks-user-9tnlh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8638d5f80a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1167 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8c3ab630-360f-4c17-ba84-25b4e323f1c2,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=8c3ab630-360f-4c17-ba84-25b4e323f1c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/cinder-ks-user-9tnlh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8c3ab630-360f-4c17-ba84-25b4e323f1c2;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=8c3ab630-360f-4c17-ba84-25b4e323f1c2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8638d5f80a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1167 identity=44727 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8c3ab630-360f-4c17-ba84-25b4e323f1c2,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=8c3ab630-360f-4c17-ba84-25b4e323f1c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/cinder-ks-user-9tnlh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8638d5f80a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1167 identity=44727 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/cinder-ks-user-9tnlh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8638d5f80a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1167 identity=44727 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/cinder-ks-user-9tnlh subsys=endpoint level=info msg="Successful endpoint creation" containerID=8638d5f80a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1167 identity=44727 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/cinder-ks-user-9tnlh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8638d5f80a endpointID=1167 k8sNamespace=openstack k8sPodName=cinder-ks-user-9tnlh subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8c3ab630-360f-4c17-ba84-25b4e323f1c2 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=8c3ab630-360f-4c17-ba84-25b4e323f1c2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8638d5f80a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1167 identity=44727 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/cinder-ks-user-9tnlh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 6d223fcb-f65a-4632-b0e4-b0056cb65e68 default }" containerID=dc5f7e2ec723423fb7c6e33967c2d4feb403d71d2901247c15b1f20cd4b9afb0 datapathConfiguration="&{false false false false false }" interface=lxc047091faa4a4 k8sPodName=openstack/cinder-backup-storage-init-5wk8h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc5f7e2ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-storage-init-5wk8h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc5f7e2ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9255cad0-fab7-4940-bc29-f2699b67e2e3,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=9255cad0-fab7-4940-bc29-f2699b67e2e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-storage-init-5wk8h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9255cad0-fab7-4940-bc29-f2699b67e2e3;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=9255cad0-fab7-4940-bc29-f2699b67e2e3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc5f7e2ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 identity=20424 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9255cad0-fab7-4940-bc29-f2699b67e2e3,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=9255cad0-fab7-4940-bc29-f2699b67e2e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-storage-init-5wk8h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc5f7e2ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 identity=20424 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-storage-init-5wk8h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dc5f7e2ec7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2906 identity=20424 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-storage-init-5wk8h subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc5f7e2ec7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2906 identity=20424 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-storage-init-5wk8h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc5f7e2ec7 endpointID=2906 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-5wk8h subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9255cad0-fab7-4940-bc29-f2699b67e2e3 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=9255cad0-fab7-4940-bc29-f2699b67e2e3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=dc5f7e2ec7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2906 identity=20424 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-storage-init-5wk8h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 4ee0c46f-9b32-4ec9-9b35-03de9146a94d default }" containerID=0e2909333a36fed0cf9537158d8538c5903f2b816fac47c20d33054ca9814269 datapathConfiguration="&{false false false false false }" interface=lxc9d566f73793a k8sPodName=openstack/cinder-create-internal-tenant-nmf9z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e2909333a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-nmf9z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e2909333a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cc9c1eb5-dfe7-4c81-af1e-09974094e17f,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=cc9c1eb5-dfe7-4c81-af1e-09974094e17f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-nmf9z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=cc9c1eb5-dfe7-4c81-af1e-09974094e17f;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=cc9c1eb5-dfe7-4c81-af1e-09974094e17f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0e2909333a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identity=10108 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cc9c1eb5-dfe7-4c81-af1e-09974094e17f,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=cc9c1eb5-dfe7-4c81-af1e-09974094e17f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-nmf9z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e2909333a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identity=10108 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-nmf9z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e2909333a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1701 identity=10108 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-nmf9z subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e2909333a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1701 identity=10108 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-nmf9z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e2909333a endpointID=1701 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-nmf9z subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=cc9c1eb5-dfe7-4c81-af1e-09974094e17f k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=cc9c1eb5-dfe7-4c81-af1e-09974094e17f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0e2909333a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1701 identity=10108 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-nmf9z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 e7cd9d2c-5a56-4efb-8fd4-719902424b30 default }" containerID=2841e85461b2c4013a6670ca97636c520f5299309323d982e03a942debc7f69e datapathConfiguration="&{false false false false false }" interface=lxc3d2c9d12f61c k8sPodName=openstack/cinder-storage-init-8t2dv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2841e85461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-storage-init-8t2dv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2841e85461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c6850331-06fb-409c-b847-597e6952c2b2,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=c6850331-06fb-409c-b847-597e6952c2b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-storage-init-8t2dv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c6850331-06fb-409c-b847-597e6952c2b2;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=c6850331-06fb-409c-b847-597e6952c2b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2841e85461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 identity=8929 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c6850331-06fb-409c-b847-597e6952c2b2,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=c6850331-06fb-409c-b847-597e6952c2b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-storage-init-8t2dv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2841e85461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 identity=8929 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-storage-init-8t2dv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2841e85461 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3011 identity=8929 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-storage-init-8t2dv subsys=endpoint level=info msg="Successful endpoint creation" containerID=2841e85461 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3011 identity=8929 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-storage-init-8t2dv subsys=daemon level=info msg="Delete endpoint request" containerID=2841e85461 endpointID=3011 k8sNamespace=openstack k8sPodName=cinder-storage-init-8t2dv subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c6850331-06fb-409c-b847-597e6952c2b2 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=c6850331-06fb-409c-b847-597e6952c2b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=2841e85461 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3011 identity=8929 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-storage-init-8t2dv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 13272756-4b62-487f-a13e-87b804a5374c default }" containerID=7582a2a9cecc366fb4f85cfd1cb11351f9c47e1ab1128549ed0bcec390fb5e84 datapathConfiguration="&{false false false false false }" interface=lxca1ab4a8981f7 k8sPodName=openstack/cinder-bootstrap-llz6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7582a2a9ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-bootstrap-llz6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7582a2a9ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=380f9e54-86c9-4e93-8b84-2cc5d343c31a,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=380f9e54-86c9-4e93-8b84-2cc5d343c31a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-bootstrap-llz6b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=380f9e54-86c9-4e93-8b84-2cc5d343c31a;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=380f9e54-86c9-4e93-8b84-2cc5d343c31a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7582a2a9ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identity=5003 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=380f9e54-86c9-4e93-8b84-2cc5d343c31a,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=380f9e54-86c9-4e93-8b84-2cc5d343c31a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-bootstrap-llz6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7582a2a9ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identity=5003 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-bootstrap-llz6b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7582a2a9ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=892 identity=5003 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-bootstrap-llz6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=7582a2a9ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=892 identity=5003 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-bootstrap-llz6b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.41 ece809c1-c729-48b1-adb8-e771db0e77df default }" containerID=e8403e083abd006d5c0e2d7641980debc5efbde49ba420ec9243394bf6ae6733 datapathConfiguration="&{false false false false false }" interface=lxc401912669b86 k8sPodName=openstack/cinder-volume-f6cd757fd-qprz8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8403e083a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/cinder-volume-f6cd757fd-qprz8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8403e083a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/cinder-volume-f6cd757fd-qprz8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.34 00b12c96-ab3c-4f58-9fe5-efff093efa9d default }" containerID=94bee81cb600d7448185f6e87137c9888b6f024802159327e47ac83bf7d3b788 datapathConfiguration="&{false false false false false }" interface=lxc6e7370bb01f8 k8sPodName=openstack/cinder-backup-56f8844cbb-sgj5h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94bee81cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/cinder-backup-56f8844cbb-sgj5h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94bee81cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/cinder-backup-56f8844cbb-sgj5h subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8403e083a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=48400 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/cinder-volume-f6cd757fd-qprz8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=e8403e083a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=48400 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/cinder-volume-f6cd757fd-qprz8 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=94bee81cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.34 ipv6= k8sPodName=openstack/cinder-backup-56f8844cbb-sgj5h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94bee81cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identity=20705 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/cinder-backup-56f8844cbb-sgj5h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94bee81cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identity=20705 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/cinder-backup-56f8844cbb-sgj5h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8403e083a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1553 identity=48400 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/cinder-volume-f6cd757fd-qprz8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8403e083a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1553 identity=48400 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/cinder-volume-f6cd757fd-qprz8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=94bee81cb6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=36 identity=20705 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/cinder-backup-56f8844cbb-sgj5h subsys=endpoint level=info msg="Successful endpoint creation" containerID=94bee81cb6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=36 identity=20705 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/cinder-backup-56f8844cbb-sgj5h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7582a2a9ce endpointID=892 k8sNamespace=openstack k8sPodName=cinder-bootstrap-llz6b subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=380f9e54-86c9-4e93-8b84-2cc5d343c31a k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=380f9e54-86c9-4e93-8b84-2cc5d343c31a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=7582a2a9ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=892 identity=5003 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/cinder-bootstrap-llz6b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 b3b70728-6292-45a9-8e14-faba66ec11c9 default }" containerID=35b0d4cc64ea2ce4fe7284c1083309095bb8eb43b5f64dc74b2c0214f4af15b1 datapathConfiguration="&{false false false false false }" interface=lxc0a856039e5ee k8sPodName=openstack/placement-api-54ff4f6df7-b4xvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35b0d4cc64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/placement-api-54ff4f6df7-b4xvm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35b0d4cc64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/placement-api-54ff4f6df7-b4xvm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35b0d4cc64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=49943 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/placement-api-54ff4f6df7-b4xvm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35b0d4cc64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=49943 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/placement-api-54ff4f6df7-b4xvm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.212 43f59389-3e9e-489a-a9d7-d596efe2db2e default }" containerID=cdb35ba7513d18223db9ee19fab2606ced6342d78fdb6cf5ee179a132240c314 datapathConfiguration="&{false false false false false }" interface=lxc999ca108282b k8sPodName=openstack/placement-db-init-cdw8q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdb35ba751 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/placement-db-init-cdw8q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdb35ba751 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3fc99bc8-6c78-49bd-9271-966178eb64b4,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=3fc99bc8-6c78-49bd-9271-966178eb64b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/placement-db-init-cdw8q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=3fc99bc8-6c78-49bd-9271-966178eb64b4;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=3fc99bc8-6c78-49bd-9271-966178eb64b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdb35ba751 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=30215 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3fc99bc8-6c78-49bd-9271-966178eb64b4,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=3fc99bc8-6c78-49bd-9271-966178eb64b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/placement-db-init-cdw8q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdb35ba751 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=30215 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/placement-db-init-cdw8q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35b0d4cc64 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=169 identity=49943 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/placement-api-54ff4f6df7-b4xvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=35b0d4cc64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=169 identity=49943 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/placement-api-54ff4f6df7-b4xvm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cdb35ba751 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=339 identity=30215 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/placement-db-init-cdw8q subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdb35ba751 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=339 identity=30215 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/placement-db-init-cdw8q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cdb35ba751 endpointID=339 k8sNamespace=openstack k8sPodName=placement-db-init-cdw8q subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=3fc99bc8-6c78-49bd-9271-966178eb64b4 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=3fc99bc8-6c78-49bd-9271-966178eb64b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=cdb35ba751 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=339 identity=30215 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/placement-db-init-cdw8q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 4bdcc412-f5c3-470a-bc40-1af7323bf07f default }" containerID=04d70daacd7e2f0a3c14f4fd3645e93e8e0dba3d8c5b17bfe5db51ac915183ca datapathConfiguration="&{false false false false false }" interface=lxc32b578f90fda k8sPodName=openstack/placement-db-sync-psv2s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04d70daacd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/placement-db-sync-psv2s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04d70daacd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e7e87cd0-64c5-484f-a398-ad2e4bbf762c,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=e7e87cd0-64c5-484f-a398-ad2e4bbf762c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/placement-db-sync-psv2s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=e7e87cd0-64c5-484f-a398-ad2e4bbf762c;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=e7e87cd0-64c5-484f-a398-ad2e4bbf762c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04d70daacd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 identity=17089 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e7e87cd0-64c5-484f-a398-ad2e4bbf762c,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=e7e87cd0-64c5-484f-a398-ad2e4bbf762c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/placement-db-sync-psv2s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04d70daacd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 identity=17089 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/placement-db-sync-psv2s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=04d70daacd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1353 identity=17089 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/placement-db-sync-psv2s subsys=endpoint level=info msg="Successful endpoint creation" containerID=04d70daacd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1353 identity=17089 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/placement-db-sync-psv2s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=04d70daacd endpointID=1353 k8sNamespace=openstack k8sPodName=placement-db-sync-psv2s subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=e7e87cd0-64c5-484f-a398-ad2e4bbf762c k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=e7e87cd0-64c5-484f-a398-ad2e4bbf762c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=04d70daacd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1353 identity=17089 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/placement-db-sync-psv2s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 7d51398f-58ad-44d7-bf09-ba93083ceb86 default }" containerID=a1aaa7d7ed4ce95dc30281d9025ba7beba95abacf894a421b89088b15dcf85d9 datapathConfiguration="&{false false false false false }" interface=lxc319e91c8c492 k8sPodName=openstack/placement-ks-service-cwqp8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1aaa7d7ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-ks-service-cwqp8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1aaa7d7ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=df56060a-1582-4460-a622-1c3fd8b22828,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=df56060a-1582-4460-a622-1c3fd8b22828,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-ks-service-cwqp8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a1aaa7d7ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-ks-service-cwqp8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=df56060a-1582-4460-a622-1c3fd8b22828;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=df56060a-1582-4460-a622-1c3fd8b22828;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1aaa7d7ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 identity=2014 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=df56060a-1582-4460-a622-1c3fd8b22828,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=df56060a-1582-4460-a622-1c3fd8b22828,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-ks-service-cwqp8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1aaa7d7ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 identity=2014 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-ks-service-cwqp8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1aaa7d7ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3814 identity=2014 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-ks-service-cwqp8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1aaa7d7ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3814 identity=2014 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-ks-service-cwqp8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a1aaa7d7ed endpointID=3814 k8sNamespace=openstack k8sPodName=placement-ks-service-cwqp8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=df56060a-1582-4460-a622-1c3fd8b22828 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=df56060a-1582-4460-a622-1c3fd8b22828 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=a1aaa7d7ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3814 identity=2014 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/placement-ks-service-cwqp8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 2d8fc5ca-2c1e-4bb6-af6e-03afcc48b2e0 default }" containerID=28321bc5afcd7b0a7defb2a58d0b9ccc8c568bea23df54dd7d6a2706ddfbe76a datapathConfiguration="&{false false false false false }" interface=lxc8f67a4fa47f1 k8sPodName=openstack/placement-ks-user-fn4zm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28321bc5af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/placement-ks-user-fn4zm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28321bc5af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ccb6b306-3a72-453c-b1d2-1fe441df616c,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=ccb6b306-3a72-453c-b1d2-1fe441df616c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/placement-ks-user-fn4zm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=ccb6b306-3a72-453c-b1d2-1fe441df616c;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=ccb6b306-3a72-453c-b1d2-1fe441df616c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=28321bc5af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=499 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ccb6b306-3a72-453c-b1d2-1fe441df616c,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=ccb6b306-3a72-453c-b1d2-1fe441df616c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/placement-ks-user-fn4zm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28321bc5af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=499 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/placement-ks-user-fn4zm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28321bc5af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=683 identity=499 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/placement-ks-user-fn4zm subsys=endpoint level=info msg="Successful endpoint creation" containerID=28321bc5af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=683 identity=499 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/placement-ks-user-fn4zm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=28321bc5af endpointID=683 k8sNamespace=openstack k8sPodName=placement-ks-user-fn4zm subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=ccb6b306-3a72-453c-b1d2-1fe441df616c k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=ccb6b306-3a72-453c-b1d2-1fe441df616c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=28321bc5af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=683 identity=499 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/placement-ks-user-fn4zm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 ca666d5a-6fd7-468f-83ec-eea48dcd1d0c default }" containerID=4ab35a3d1660d3c57454cc2aba0339bf94ede9cf03ebac83aba36649bf995943 datapathConfiguration="&{false false false false false }" interface=lxcc25ec8ba5b59 k8sPodName=openstack/placement-ks-endpoints-94vdk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ab35a3d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/placement-ks-endpoints-94vdk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ab35a3d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=58a52337-8245-4667-97c0-e5845a7545e1,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=58a52337-8245-4667-97c0-e5845a7545e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/placement-ks-endpoints-94vdk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=58a52337-8245-4667-97c0-e5845a7545e1;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=58a52337-8245-4667-97c0-e5845a7545e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ab35a3d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identity=4746 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=58a52337-8245-4667-97c0-e5845a7545e1,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=58a52337-8245-4667-97c0-e5845a7545e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/placement-ks-endpoints-94vdk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ab35a3d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identity=4746 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/placement-ks-endpoints-94vdk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ab35a3d16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=238 identity=4746 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/placement-ks-endpoints-94vdk subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ab35a3d16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=238 identity=4746 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/placement-ks-endpoints-94vdk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4ab35a3d16 endpointID=238 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-94vdk subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=58a52337-8245-4667-97c0-e5845a7545e1 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=58a52337-8245-4667-97c0-e5845a7545e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=4ab35a3d16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=238 identity=4746 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/placement-ks-endpoints-94vdk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 7268c132-0a14-410f-b98c-28a877b3c39f default }" containerID=0bbb1208af1d5d88a77c01d5659a13f40c77d1de1332a069e50b8a677abb6cc2 datapathConfiguration="&{false false false false false }" interface=lxcf56dcd15ede3 k8sPodName=openstack/neutron-coredns-7dd4958666-w5c94 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bbb1208af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3129 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-w5c94 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bbb1208af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3129 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-w5c94 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bbb1208af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3129 identity=29393 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-w5c94 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bbb1208af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3129 identity=29393 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-w5c94 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0bbb1208af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3129 identity=29393 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-w5c94 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bbb1208af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3129 identity=29393 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-w5c94 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 a18ad2e7-0ede-470a-94c3-a0d851039e2c default }" containerID=3f241d8a044a6101e97e7bdb4795953b8397abe52041e7df8113e887123e9fd6 datapathConfiguration="&{false false false false false }" interface=lxcf2764ef22f71 k8sPodName=local-path-storage/helper-pod-create-pvc-7e939d7e-ab66-4625-b8a4-91d28186aeba labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f241d8a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7e939d7e-ab66-4625-b8a4-91d28186aeba subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f241d8a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7e939d7e-ab66-4625-b8a4-91d28186aeba subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f241d8a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identity=37540 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7e939d7e-ab66-4625-b8a4-91d28186aeba oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f241d8a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identity=37540 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7e939d7e-ab66-4625-b8a4-91d28186aeba subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f241d8a04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1772 identity=37540 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7e939d7e-ab66-4625-b8a4-91d28186aeba subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f241d8a04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1772 identity=37540 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7e939d7e-ab66-4625-b8a4-91d28186aeba subsys=daemon level=info msg="Delete endpoint request" containerID=3f241d8a04 endpointID=1772 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7e939d7e-ab66-4625-b8a4-91d28186aeba subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3f241d8a04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1772 identity=37540 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7e939d7e-ab66-4625-b8a4-91d28186aeba subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 9e824062-402d-46e4-b1f1-fc36e6e8632f default }" containerID=8c2922788ad998e2b1d95f324c025e6c36a6b54157dd9bf622badff737395afc datapathConfiguration="&{false false false false false }" interface=lxc752aa9fbefc9 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c2922788a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c2922788a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8c2922788a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c2922788a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identity=18028 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c2922788a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identity=18028 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c2922788a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=438 identity=18028 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c2922788a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=438 identity=18028 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 d07cc607-70df-41ae-974e-9d20a4e30ec3 default }" containerID=17bb5b6b92a965e7fa8d2b5eae5fe46cf10977d0a093d071ef10907e7c354b3c datapathConfiguration="&{false false false false false }" interface=lxc6385f88d97c4 k8sPodName=openstack/nova-scheduler-85c459f56d-npg7s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17bb5b6b92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/nova-scheduler-85c459f56d-npg7s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17bb5b6b92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/nova-scheduler-85c459f56d-npg7s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.59 7800d1ac-95b5-4102-b84f-7757e98994f2 default }" containerID=ac42531fc5ecd3f8306a59f06b7ea4ebeefcec211a075a0e644632c02f4c6fac datapathConfiguration="&{false false false false false }" interface=lxc214a643d1867 k8sPodName=openstack/nova-conductor-8488f9b4f6-kvs4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac42531fc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/nova-conductor-8488f9b4f6-kvs4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac42531fc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/nova-conductor-8488f9b4f6-kvs4r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ac42531fc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=openstack/nova-conductor-8488f9b4f6-kvs4r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17bb5b6b92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 identity=51971 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/nova-scheduler-85c459f56d-npg7s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17bb5b6b92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 identity=51971 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/nova-scheduler-85c459f56d-npg7s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac42531fc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 identity=892 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/nova-conductor-8488f9b4f6-kvs4r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac42531fc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 identity=892 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/nova-conductor-8488f9b4f6-kvs4r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 3c0c60d9-bc7e-442a-9f2e-b963cfe5b004 default }" containerID=771bd5719ab630ece0ff0efb8f54066a03f074181ce9b7e931774dc715a8e366 datapathConfiguration="&{false false false false false }" interface=lxc986fffa89ac6 k8sPodName=openstack/nova-bootstrap-s4x84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=771bd5719a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=465 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-bootstrap-s4x84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=771bd5719a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=465 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=60733f6c-28b6-47cf-ad57-b6673576f6c9,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=60733f6c-28b6-47cf-ad57-b6673576f6c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-bootstrap-s4x84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=60733f6c-28b6-47cf-ad57-b6673576f6c9;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=60733f6c-28b6-47cf-ad57-b6673576f6c9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=771bd5719a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=465 identity=2797 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=60733f6c-28b6-47cf-ad57-b6673576f6c9,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=60733f6c-28b6-47cf-ad57-b6673576f6c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-bootstrap-s4x84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=771bd5719a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=465 identity=2797 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-bootstrap-s4x84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 f9877ab5-e551-4329-aceb-0f08014e0d02 default }" containerID=27d773772c367a5e5c52dde3353cebe109f8045cac4ea7e8f563090581b00b1c datapathConfiguration="&{false false false false false }" interface=lxceb38b3384688 k8sPodName=openstack/nova-api-osapi-688884b6cb-p84nf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27d773772c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3783 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/nova-api-osapi-688884b6cb-p84nf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27d773772c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3783 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/nova-api-osapi-688884b6cb-p84nf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.3 428ec3ab-a558-4efb-ac9a-394683704eb7 default }" containerID=d7614ba195eff1ba8ffac7edca1b1c69635e0d441afa6fd770c75a2d3098033e datapathConfiguration="&{false false false false false }" interface=lxcb3cf60965623 k8sPodName=openstack/nova-cell-setup-cjqbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7614ba195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1642 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/nova-cell-setup-cjqbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7614ba195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1642 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=af3f24c2-ae10-44d3-9b68-ce7b9eab9d38,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=af3f24c2-ae10-44d3-9b68-ce7b9eab9d38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/nova-cell-setup-cjqbv subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27d773772c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3783 identity=30123 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/nova-api-osapi-688884b6cb-p84nf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27d773772c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3783 identity=30123 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/nova-api-osapi-688884b6cb-p84nf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=af3f24c2-ae10-44d3-9b68-ce7b9eab9d38;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=af3f24c2-ae10-44d3-9b68-ce7b9eab9d38;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7614ba195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1642 identity=5846 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=af3f24c2-ae10-44d3-9b68-ce7b9eab9d38,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=af3f24c2-ae10-44d3-9b68-ce7b9eab9d38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/nova-cell-setup-cjqbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7614ba195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1642 identity=5846 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/nova-cell-setup-cjqbv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 6f976146-999f-4650-aaec-706bd4fa76ad default }" containerID=d8c674132d8e3ab25b756185d7aa9f795e4fde34f3c6d10e076ed249e125e934 datapathConfiguration="&{false false false false false }" interface=lxc17082314af1d k8sPodName=openstack/nova-api-metadata-687659fcfb-v99vk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8c674132d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/nova-api-metadata-687659fcfb-v99vk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8c674132d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/nova-api-metadata-687659fcfb-v99vk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=17bb5b6b92 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=79 identity=51971 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/nova-scheduler-85c459f56d-npg7s subsys=endpoint level=info msg="Successful endpoint creation" containerID=17bb5b6b92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=79 identity=51971 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/nova-scheduler-85c459f56d-npg7s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ac42531fc5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1946 identity=892 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/nova-conductor-8488f9b4f6-kvs4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac42531fc5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1946 identity=892 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/nova-conductor-8488f9b4f6-kvs4r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 dcf65f5f-f46c-4db5-bcc6-9a7c2bf4fd4c default }" containerID=3d7f5d22d68f570b05febd71c40d7eb81a0cb5b8f2a99c51e604a0435861d183 datapathConfiguration="&{false false false false false }" interface=lxc8d4e86c21255 k8sPodName=openstack/nova-db-init-25vjv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d7f5d22d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-db-init-25vjv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d7f5d22d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=bf6af536-5641-43b0-babb-45d069c6dc2e,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=bf6af536-5641-43b0-babb-45d069c6dc2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-db-init-25vjv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=771bd5719a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=465 identity=2797 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-bootstrap-s4x84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=771bd5719a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=465 identity=2797 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-bootstrap-s4x84 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=27d773772c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3783 identity=30123 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/nova-api-osapi-688884b6cb-p84nf subsys=endpoint level=info msg="Successful endpoint creation" containerID=27d773772c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3783 identity=30123 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/nova-api-osapi-688884b6cb-p84nf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d7614ba195 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1642 identity=5846 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/nova-cell-setup-cjqbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7614ba195 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1642 identity=5846 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/nova-cell-setup-cjqbv subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8c674132d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identity=18214 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/nova-api-metadata-687659fcfb-v99vk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8c674132d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identity=18214 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/nova-api-metadata-687659fcfb-v99vk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=d8c674132d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2386 identity=18214 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/nova-api-metadata-687659fcfb-v99vk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8c674132d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2386 identity=18214 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/nova-api-metadata-687659fcfb-v99vk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3d7f5d22d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-db-init-25vjv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=bf6af536-5641-43b0-babb-45d069c6dc2e;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=bf6af536-5641-43b0-babb-45d069c6dc2e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d7f5d22d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identity=11989 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=bf6af536-5641-43b0-babb-45d069c6dc2e,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=bf6af536-5641-43b0-babb-45d069c6dc2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-db-init-25vjv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d7f5d22d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identity=11989 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-db-init-25vjv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d7f5d22d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=597 identity=11989 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-db-init-25vjv subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d7f5d22d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=597 identity=11989 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-db-init-25vjv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.88 fce71975-c935-4e5a-86b0-62501c775fba default }" containerID=b0920a361b6ad8e6a9885cb9d89b930dec647b559cf9e62fb1b1bab3dbd81dbd datapathConfiguration="&{false false false false false }" interface=lxc9e8772c7796b k8sPodName=openstack/nova-novncproxy-5b8f5f745f-dtw7k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0920a361b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/nova-novncproxy-5b8f5f745f-dtw7k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0920a361b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/nova-novncproxy-5b8f5f745f-dtw7k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0920a361b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identity=12115 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/nova-novncproxy-5b8f5f745f-dtw7k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0920a361b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identity=12115 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/nova-novncproxy-5b8f5f745f-dtw7k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0920a361b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=574 identity=12115 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/nova-novncproxy-5b8f5f745f-dtw7k subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0920a361b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=574 identity=12115 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/nova-novncproxy-5b8f5f745f-dtw7k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d7f5d22d6 endpointID=597 k8sNamespace=openstack k8sPodName=nova-db-init-25vjv subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=bf6af536-5641-43b0-babb-45d069c6dc2e k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=bf6af536-5641-43b0-babb-45d069c6dc2e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=3d7f5d22d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=597 identity=11989 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-db-init-25vjv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 82dc4dfb-c2de-4272-ad8f-12a41e015aba default }" containerID=e5793c6368f276c2485c422a642ccabecbb5fba47fb469ec5f22a7dc96f5afc2 datapathConfiguration="&{false false false false false }" interface=lxc1c54911998fe k8sPodName=openstack/nova-db-sync-klzxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5793c6368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/nova-db-sync-klzxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5793c6368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f8c131b3-a093-44f2-9b01-e9df28b4df0d,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=f8c131b3-a093-44f2-9b01-e9df28b4df0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/nova-db-sync-klzxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=f8c131b3-a093-44f2-9b01-e9df28b4df0d;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=f8c131b3-a093-44f2-9b01-e9df28b4df0d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5793c6368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identity=12590 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f8c131b3-a093-44f2-9b01-e9df28b4df0d,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=f8c131b3-a093-44f2-9b01-e9df28b4df0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/nova-db-sync-klzxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5793c6368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identity=12590 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/nova-db-sync-klzxf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e5793c6368 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1205 identity=12590 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/nova-db-sync-klzxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5793c6368 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1205 identity=12590 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/nova-db-sync-klzxf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e5793c6368 endpointID=1205 k8sNamespace=openstack k8sPodName=nova-db-sync-klzxf subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=f8c131b3-a093-44f2-9b01-e9df28b4df0d k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=f8c131b3-a093-44f2-9b01-e9df28b4df0d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=e5793c6368 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1205 identity=12590 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/nova-db-sync-klzxf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 c8eded63-b203-49d7-81bc-c341b85ffd44 default }" containerID=dbbabcb453f4c2c387661bb38691c8b5e679e3d084098dc5c728e69fe6c88cb5 datapathConfiguration="&{false false false false false }" interface=lxc811c7a402869 k8sPodName=openstack/nova-rabbit-init-vjq7l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbbabcb453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2508 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/nova-rabbit-init-vjq7l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbbabcb453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2508 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1659c7b8-73aa-44c4-b6f9-9a0c6ebab9ce,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1659c7b8-73aa-44c4-b6f9-9a0c6ebab9ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/nova-rabbit-init-vjq7l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=1659c7b8-73aa-44c4-b6f9-9a0c6ebab9ce;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1659c7b8-73aa-44c4-b6f9-9a0c6ebab9ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbbabcb453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2508 identity=3447 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1659c7b8-73aa-44c4-b6f9-9a0c6ebab9ce,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1659c7b8-73aa-44c4-b6f9-9a0c6ebab9ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/nova-rabbit-init-vjq7l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbbabcb453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2508 identity=3447 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/nova-rabbit-init-vjq7l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dbbabcb453 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2508 identity=3447 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/nova-rabbit-init-vjq7l subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbbabcb453 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2508 identity=3447 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/nova-rabbit-init-vjq7l subsys=daemon level=info msg="Delete endpoint request" containerID=dbbabcb453 endpointID=2508 k8sNamespace=openstack k8sPodName=nova-rabbit-init-vjq7l subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=1659c7b8-73aa-44c4-b6f9-9a0c6ebab9ce k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1659c7b8-73aa-44c4-b6f9-9a0c6ebab9ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=dbbabcb453 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2508 identity=3447 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/nova-rabbit-init-vjq7l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 f50de889-64b0-4914-bcbd-c41d40362c3f default }" containerID=da73986a68ddca95f63320ed4305db76be1e6de8a0baf4d725589b806163048c datapathConfiguration="&{false false false false false }" interface=lxcd15e9c31e842 k8sPodName=openstack/nova-ks-service-2m2w8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da73986a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/nova-ks-service-2m2w8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da73986a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=00a31670-c033-4b08-bf8b-c73d3099f1d7,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=00a31670-c033-4b08-bf8b-c73d3099f1d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/nova-ks-service-2m2w8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=00a31670-c033-4b08-bf8b-c73d3099f1d7;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=00a31670-c033-4b08-bf8b-c73d3099f1d7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=da73986a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 identity=3918 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=00a31670-c033-4b08-bf8b-c73d3099f1d7,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=00a31670-c033-4b08-bf8b-c73d3099f1d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/nova-ks-service-2m2w8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da73986a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 identity=3918 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/nova-ks-service-2m2w8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da73986a68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2692 identity=3918 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/nova-ks-service-2m2w8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da73986a68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2692 identity=3918 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/nova-ks-service-2m2w8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da73986a68 endpointID=2692 k8sNamespace=openstack k8sPodName=nova-ks-service-2m2w8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=00a31670-c033-4b08-bf8b-c73d3099f1d7 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=00a31670-c033-4b08-bf8b-c73d3099f1d7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=da73986a68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2692 identity=3918 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/nova-ks-service-2m2w8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 ce059f4f-d3df-4c2e-85d4-73be26ba5502 default }" containerID=ce2cf961e5899267e9833462892b10241904f4c8ca0cf252aee0204b00751148 datapathConfiguration="&{false false false false false }" interface=lxc82f2a81ea7de k8sPodName=openstack/nova-ks-endpoints-l9wgm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce2cf961e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-endpoints-l9wgm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce2cf961e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=19492c51-2504-43b4-aabf-8f73687fb59b,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=19492c51-2504-43b4-aabf-8f73687fb59b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-endpoints-l9wgm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=19492c51-2504-43b4-aabf-8f73687fb59b;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=19492c51-2504-43b4-aabf-8f73687fb59b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ce2cf961e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-endpoints-l9wgm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ce2cf961e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=54293 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=19492c51-2504-43b4-aabf-8f73687fb59b,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=19492c51-2504-43b4-aabf-8f73687fb59b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-endpoints-l9wgm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce2cf961e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=54293 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-endpoints-l9wgm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce2cf961e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1922 identity=54293 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-endpoints-l9wgm subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce2cf961e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1922 identity=54293 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-endpoints-l9wgm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ce2cf961e5 endpointID=1922 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-l9wgm subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=19492c51-2504-43b4-aabf-8f73687fb59b k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=19492c51-2504-43b4-aabf-8f73687fb59b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=ce2cf961e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1922 identity=54293 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/nova-ks-endpoints-l9wgm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 3784e061-50ae-4e34-8cd2-d15c5461ce96 default }" containerID=47e4dd2face5395cb4ceb9001fdeff88f1132e7acffd214ed42f6ca9d4f848ca datapathConfiguration="&{false false false false false }" interface=lxc55bcb9996982 k8sPodName=openstack/nova-ks-user-zzpkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47e4dd2fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/nova-ks-user-zzpkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47e4dd2fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a0e2e5d4-37ec-4d1c-87c5-cd685c9fcc1a,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=a0e2e5d4-37ec-4d1c-87c5-cd685c9fcc1a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/nova-ks-user-zzpkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=a0e2e5d4-37ec-4d1c-87c5-cd685c9fcc1a;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=a0e2e5d4-37ec-4d1c-87c5-cd685c9fcc1a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47e4dd2fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identity=9956 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a0e2e5d4-37ec-4d1c-87c5-cd685c9fcc1a,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=a0e2e5d4-37ec-4d1c-87c5-cd685c9fcc1a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/nova-ks-user-zzpkb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47e4dd2fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identity=9956 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/nova-ks-user-zzpkb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47e4dd2fac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=668 identity=9956 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/nova-ks-user-zzpkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=47e4dd2fac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=668 identity=9956 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/nova-ks-user-zzpkb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=47e4dd2fac endpointID=668 k8sNamespace=openstack k8sPodName=nova-ks-user-zzpkb subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=a0e2e5d4-37ec-4d1c-87c5-cd685c9fcc1a k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=a0e2e5d4-37ec-4d1c-87c5-cd685c9fcc1a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=47e4dd2fac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=668 identity=9956 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/nova-ks-user-zzpkb subsys=endpoint level=info msg="Delete endpoint request" containerID=771bd5719a endpointID=465 k8sNamespace=openstack k8sPodName=nova-bootstrap-s4x84 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=60733f6c-28b6-47cf-ad57-b6673576f6c9 k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=60733f6c-28b6-47cf-ad57-b6673576f6c9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=771bd5719a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=465 identity=2797 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-bootstrap-s4x84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 a8da9672-89bb-40e2-8fa9-9cfbc5db6cef default }" containerID=19ee3a97c81e7d087294b401bc03039ef2179ddde17cee41e9983d3f5dffc9f8 datapathConfiguration="&{false false false false false }" interface=lxc92a6d9518efc k8sPodName=local-path-storage/helper-pod-create-pvc-e0e94e03-4c5b-4947-aff0-1bb03a4d9d54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19ee3a97c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0e94e03-4c5b-4947-aff0-1bb03a4d9d54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19ee3a97c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0e94e03-4c5b-4947-aff0-1bb03a4d9d54 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19ee3a97c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identity=37540 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0e94e03-4c5b-4947-aff0-1bb03a4d9d54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19ee3a97c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identity=37540 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0e94e03-4c5b-4947-aff0-1bb03a4d9d54 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19ee3a97c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=80 identity=37540 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0e94e03-4c5b-4947-aff0-1bb03a4d9d54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19ee3a97c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=80 identity=37540 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0e94e03-4c5b-4947-aff0-1bb03a4d9d54 subsys=daemon level=info msg="Delete endpoint request" containerID=19ee3a97c8 endpointID=80 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e0e94e03-4c5b-4947-aff0-1bb03a4d9d54 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=19ee3a97c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=80 identity=37540 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0e94e03-4c5b-4947-aff0-1bb03a4d9d54 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 4a85137d-7d74-4cf8-b792-a7445a630153 default }" containerID=22bf534f179248fcc3e0cd5bc5e32c42acbe3c6ec26dda65f7b2f47f21a8558b datapathConfiguration="&{false false false false false }" interface=lxc9547e9fb4f2a k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22bf534f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3900 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22bf534f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3900 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22bf534f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3900 identity=55409 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22bf534f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3900 identity=55409 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22bf534f17 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3900 identity=55409 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22bf534f17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3900 identity=55409 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.123 98a5ae10-96c5-49e3-9256-39c4c4124865 default }" containerID=2fbf631c0f046dfdc6c50186ad12e13a72f45bf753bf9a4710c7946f0b74e4a7 datapathConfiguration="&{false false false false false }" interface=lxc1aff116b49c9 k8sPodName=openstack/neutron-rpc-server-868c7c97cf-l5wvz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fbf631c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3576 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/neutron-rpc-server-868c7c97cf-l5wvz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fbf631c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3576 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/neutron-rpc-server-868c7c97cf-l5wvz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.211 ab9c1707-2340-4695-b388-d34533490ffc default }" containerID=a7bdd18b73738fcb4b7949e025d4343833dde449f15cb3d35af48ed518ebfa55 datapathConfiguration="&{false false false false false }" interface=lxc4d0000cdcedd k8sPodName=openstack/neutron-server-65bb8d6dcd-m8j4k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7bdd18b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/neutron-server-65bb8d6dcd-m8j4k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID=a7bdd18b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/neutron-server-65bb8d6dcd-m8j4k subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fbf631c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3576 identity=63903 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/neutron-rpc-server-868c7c97cf-l5wvz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fbf631c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3576 identity=63903 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/neutron-rpc-server-868c7c97cf-l5wvz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=a7bdd18b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.211 ipv6= k8sPodName=openstack/neutron-server-65bb8d6dcd-m8j4k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7bdd18b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 identity=44031 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/neutron-server-65bb8d6dcd-m8j4k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7bdd18b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 identity=44031 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/neutron-server-65bb8d6dcd-m8j4k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 96bbc76c-6abe-4336-9559-7597bd5bb597 default }" containerID=d1798e70b0e674ab0e502c73ae31f07f54f573fbdd4c9382cdc3d731f0c25546 datapathConfiguration="&{false false false false false }" interface=lxc2f858303a265 k8sPodName=openstack/neutron-db-init-wg6w6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1798e70b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-db-init-wg6w6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1798e70b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=3bcb3975-483d-4f24-a20d-d133c9fb4f16,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=3bcb3975-483d-4f24-a20d-d133c9fb4f16,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-db-init-wg6w6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=3bcb3975-483d-4f24-a20d-d133c9fb4f16;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=3bcb3975-483d-4f24-a20d-d133c9fb4f16;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1798e70b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identity=9842 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=3bcb3975-483d-4f24-a20d-d133c9fb4f16,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=3bcb3975-483d-4f24-a20d-d133c9fb4f16,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-db-init-wg6w6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1798e70b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identity=9842 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-db-init-wg6w6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7bdd18b73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3754 identity=44031 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/neutron-server-65bb8d6dcd-m8j4k subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7bdd18b73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3754 identity=44031 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/neutron-server-65bb8d6dcd-m8j4k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2fbf631c0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3576 identity=63903 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/neutron-rpc-server-868c7c97cf-l5wvz subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fbf631c0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3576 identity=63903 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/neutron-rpc-server-868c7c97cf-l5wvz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d1798e70b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2999 identity=9842 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-db-init-wg6w6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1798e70b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2999 identity=9842 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-db-init-wg6w6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d1798e70b0 endpointID=2999 k8sNamespace=openstack k8sPodName=neutron-db-init-wg6w6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=3bcb3975-483d-4f24-a20d-d133c9fb4f16 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=3bcb3975-483d-4f24-a20d-d133c9fb4f16 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=d1798e70b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2999 identity=9842 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-db-init-wg6w6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 deecfd40-2e78-406e-b0b2-41113e262d1a default }" containerID=8f0b634cc7e3ddc150b465ae5a0285f70b94cfdf6c2067462b3c85dfa06df466 datapathConfiguration="&{false false false false false }" interface=lxcd9835d06107a k8sPodName=openstack/neutron-db-sync-pl4kn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f0b634cc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=965 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/neutron-db-sync-pl4kn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f0b634cc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=965 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=55567510-e003-432d-9130-746628cdc641,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=55567510-e003-432d-9130-746628cdc641,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/neutron-db-sync-pl4kn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=55567510-e003-432d-9130-746628cdc641;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=55567510-e003-432d-9130-746628cdc641;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f0b634cc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=965 identity=25016 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=55567510-e003-432d-9130-746628cdc641,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=55567510-e003-432d-9130-746628cdc641,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/neutron-db-sync-pl4kn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f0b634cc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=965 identity=25016 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/neutron-db-sync-pl4kn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8f0b634cc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=965 identity=25016 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/neutron-db-sync-pl4kn subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f0b634cc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=965 identity=25016 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/neutron-db-sync-pl4kn subsys=daemon level=info msg="Delete endpoint request" containerID=8f0b634cc7 endpointID=965 k8sNamespace=openstack k8sPodName=neutron-db-sync-pl4kn subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=55567510-e003-432d-9130-746628cdc641 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=55567510-e003-432d-9130-746628cdc641 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=8f0b634cc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=965 identity=25016 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/neutron-db-sync-pl4kn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 f740298d-385b-4ac9-a0b7-b4e85aec0d92 default }" containerID=9e9185830076948b60874ee0348e716fe31d65026d9a39c547327561c4afefec datapathConfiguration="&{false false false false false }" interface=lxc41671d02eb0e k8sPodName=openstack/neutron-rabbit-init-g96gj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e91858300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1526 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/neutron-rabbit-init-g96gj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e91858300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1526 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=78ad6e3f-0e27-4e02-8f80-4174fad37395,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=78ad6e3f-0e27-4e02-8f80-4174fad37395,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/neutron-rabbit-init-g96gj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=78ad6e3f-0e27-4e02-8f80-4174fad37395;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=78ad6e3f-0e27-4e02-8f80-4174fad37395;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e91858300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1526 identity=1872 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=78ad6e3f-0e27-4e02-8f80-4174fad37395,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=78ad6e3f-0e27-4e02-8f80-4174fad37395,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/neutron-rabbit-init-g96gj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e91858300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1526 identity=1872 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/neutron-rabbit-init-g96gj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9e91858300 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1526 identity=1872 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/neutron-rabbit-init-g96gj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e91858300 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1526 identity=1872 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/neutron-rabbit-init-g96gj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9e91858300 endpointID=1526 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-g96gj subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=78ad6e3f-0e27-4e02-8f80-4174fad37395 k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=78ad6e3f-0e27-4e02-8f80-4174fad37395 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=9e91858300 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1526 identity=1872 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/neutron-rabbit-init-g96gj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 4d4d6d0b-a8d0-40e5-8e51-beef8ae6879b default }" containerID=157fda0024bcb75e1e82d43ac79f112ef50ddf18111d9df550961cf73b245422 datapathConfiguration="&{false false false false false }" interface=lxcdf002d04ea55 k8sPodName=openstack/neutron-ks-service-g9ljm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=157fda0024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1661 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/neutron-ks-service-g9ljm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=157fda0024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1661 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1354eb9a-95d7-4a5d-94ac-a9746c7c9ac7,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=1354eb9a-95d7-4a5d-94ac-a9746c7c9ac7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/neutron-ks-service-g9ljm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=1354eb9a-95d7-4a5d-94ac-a9746c7c9ac7;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=1354eb9a-95d7-4a5d-94ac-a9746c7c9ac7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=157fda0024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1661 identity=54731 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1354eb9a-95d7-4a5d-94ac-a9746c7c9ac7,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=1354eb9a-95d7-4a5d-94ac-a9746c7c9ac7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/neutron-ks-service-g9ljm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=157fda0024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1661 identity=54731 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/neutron-ks-service-g9ljm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=157fda0024 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1661 identity=54731 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/neutron-ks-service-g9ljm subsys=endpoint level=info msg="Successful endpoint creation" containerID=157fda0024 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1661 identity=54731 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/neutron-ks-service-g9ljm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=157fda0024 endpointID=1661 k8sNamespace=openstack k8sPodName=neutron-ks-service-g9ljm subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=1354eb9a-95d7-4a5d-94ac-a9746c7c9ac7 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=1354eb9a-95d7-4a5d-94ac-a9746c7c9ac7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=157fda0024 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1661 identity=54731 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/neutron-ks-service-g9ljm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 abd46b16-802d-4536-930d-a279f32a59e3 default }" containerID=b920c09b6a045db9dfad922fb1dd49d37ab8d5bf9508f7c35c8fcf0e9b7467e7 datapathConfiguration="&{false false false false false }" interface=lxc777b4101c3f9 k8sPodName=openstack/neutron-ks-endpoints-zfdgt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b920c09b6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4041 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/neutron-ks-endpoints-zfdgt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b920c09b6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4041 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=cb012800-9f76-4763-bcea-61da1e0c0d58,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cb012800-9f76-4763-bcea-61da1e0c0d58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/neutron-ks-endpoints-zfdgt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=cb012800-9f76-4763-bcea-61da1e0c0d58;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=cb012800-9f76-4763-bcea-61da1e0c0d58;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b920c09b6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4041 identity=63987 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=cb012800-9f76-4763-bcea-61da1e0c0d58,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cb012800-9f76-4763-bcea-61da1e0c0d58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/neutron-ks-endpoints-zfdgt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b920c09b6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4041 identity=63987 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/neutron-ks-endpoints-zfdgt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b920c09b6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4041 identity=63987 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/neutron-ks-endpoints-zfdgt subsys=endpoint level=info msg="Successful endpoint creation" containerID=b920c09b6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4041 identity=63987 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/neutron-ks-endpoints-zfdgt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b920c09b6a endpointID=4041 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-zfdgt subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=cb012800-9f76-4763-bcea-61da1e0c0d58 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=cb012800-9f76-4763-bcea-61da1e0c0d58 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=b920c09b6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4041 identity=63987 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/neutron-ks-endpoints-zfdgt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 b4e78fba-2a3d-43c3-a2b0-ce7f90a0a416 default }" containerID=5d3589e70c360447e8b23b2679695248a0a51b45bc18f60d2234f60c728fc5c8 datapathConfiguration="&{false false false false false }" interface=lxcbefb87a8de31 k8sPodName=openstack/neutron-ks-user-n6l5w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d3589e70c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-ks-user-n6l5w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d3589e70c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=b912d145-d3e2-41a6-9f30-a54bd7ede319,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=b912d145-d3e2-41a6-9f30-a54bd7ede319,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-ks-user-n6l5w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=b912d145-d3e2-41a6-9f30-a54bd7ede319;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=b912d145-d3e2-41a6-9f30-a54bd7ede319;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d3589e70c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=48396 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=b912d145-d3e2-41a6-9f30-a54bd7ede319,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=b912d145-d3e2-41a6-9f30-a54bd7ede319,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-ks-user-n6l5w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d3589e70c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=48396 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-ks-user-n6l5w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5d3589e70c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1038 identity=48396 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-ks-user-n6l5w subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d3589e70c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1038 identity=48396 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-ks-user-n6l5w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5d3589e70c endpointID=1038 k8sNamespace=openstack k8sPodName=neutron-ks-user-n6l5w subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=b912d145-d3e2-41a6-9f30-a54bd7ede319 k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=b912d145-d3e2-41a6-9f30-a54bd7ede319 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=5d3589e70c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1038 identity=48396 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-ks-user-n6l5w subsys=endpoint