level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="880.454µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="53.272µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="893.825µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="7.611µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=103.717539ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.28µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="22.04µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="68.271µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="75.002µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="86.563µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="561.047µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.85µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.180473ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=10.834412ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="51.331µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="38.661µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="179.245µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="103.193µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="82.322µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=58.042687ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="142.604µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="11.63µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.233.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.662488ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="12.98µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.306455ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.396198ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="12.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.16µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="102.563µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="27.97µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="52.261µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="408.821µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.69µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="552.916µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="917.885µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.46733ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="7.911µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="22.892µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.233 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.233 ipAddr.ipv6="" k8sNodeIP=199.204.45.233 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.233" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.199" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.233" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.233} {CiliumInternalIP 10.0.0.199}] 10.0.0.0/24 [] [] 10.0.0.229 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38433" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.686295498s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="29.68µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="11.631µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="46.441µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="12.69µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.634158365s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=303.558736ms file-path=/var/run/cilium/state/templates/8c7d2b6910251250e34872c5924de61acb9ebcb0464cfaa2d890fa6faf7364e6/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=999 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 b612ccf3-99a5-4133-829f-6e1d4b96033d default }" containerID=c6496d483cd9699e826d3a42c60a0790e05f1425d5085a0974b1ec89477daac5 datapathConfiguration="&{false false false false false }" interface=lxc63328b70c0e0 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6k8lp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6496d483c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6k8lp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6496d483c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=61f3a862-bce9-4d95-a8b5-b7183ef03830,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=61f3a862-bce9-4d95-a8b5-b7183ef03830,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6k8lp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=61f3a862-bce9-4d95-a8b5-b7183ef03830;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=61f3a862-bce9-4d95-a8b5-b7183ef03830;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c6496d483c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identity=60692 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=61f3a862-bce9-4d95-a8b5-b7183ef03830,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=61f3a862-bce9-4d95-a8b5-b7183ef03830,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6k8lp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6496d483c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identity=60692 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6k8lp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 036eae64-8da0-471b-a106-dda7694b7abd default }" containerID=ad46c5df69754d3e489d623773766c6ce74a10b7f953602cab0f5072659633a0 datapathConfiguration="&{false false false false false }" interface=lxc72e597921809 k8sPodName=kube-system/coredns-7c96b6546b-hslqt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad46c5df69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2756 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hslqt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad46c5df69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2756 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hslqt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad46c5df69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2756 identity=7491 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hslqt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad46c5df69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2756 identity=7491 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hslqt subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 ipv4=10.0.0.229 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 identityLabels="reserved:health" ipv4=10.0.0.229 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 identity=4 identityLabels="reserved:health" ipv4=10.0.0.229 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.054317302s file-path=/var/run/cilium/state/templates/d0930bf7617848681674834cc48b330a96e20db9cfcd8766886bf9b56ad3563f/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=c6496d483c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1546 identity=60692 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6k8lp subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6496d483c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1546 identity=60692 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6k8lp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=667 identity=4 ipv4=10.0.0.229 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad46c5df69 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2756 identity=7491 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hslqt subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad46c5df69 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2756 identity=7491 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hslqt subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c6496d483c endpointID=1546 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-6k8lp subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=61f3a862-bce9-4d95-a8b5-b7183ef03830 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=61f3a862-bce9-4d95-a8b5-b7183ef03830 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=c6496d483c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1546 identity=60692 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6k8lp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 eb08c27d-794b-4261-b90f-bf976c797274 default }" containerID=b7ab4f6e3ab3b19bcaad55234772c827fe8daf88817069f932ff9d7d211289b2 datapathConfiguration="&{false false false false false }" interface=lxc48491af956c8 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ltqvx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7ab4f6e3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ltqvx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7ab4f6e3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ltqvx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b7ab4f6e3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ltqvx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b7ab4f6e3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=26608 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ltqvx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7ab4f6e3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=26608 ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ltqvx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7ab4f6e3a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=772 identity=26608 ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ltqvx subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7ab4f6e3a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=772 identity=26608 ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ltqvx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=999 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00999 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00999 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00999 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00999:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=999 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 24a870a2-b3df-4e28-9577-6615f2846102 default }" containerID=c41b08780772ef6ad45365e2063396dcca894d7ed65b4fb82f088ff164d811ec datapathConfiguration="&{false false false false false }" interface=lxc225cd3ac12ad k8sPodName=kube-system/coredns-67659f764b-4pxpl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c41b087807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-4pxpl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c41b087807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-4pxpl subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c41b087807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identity=7491 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-4pxpl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c41b087807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identity=7491 ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-4pxpl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 ee615c10-e144-4e53-b97e-f68ba582afba default }" containerID=e1c8238c2a354ab2ba0950a1b6c9f71d5ae55c683c0f418cc1ef69e1eafdff5f datapathConfiguration="&{false false false false false }" interface=lxc4a31c9135326 k8sPodName=kube-system/coredns-67659f764b-hwbmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1c8238c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1336 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwbmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1c8238c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1336 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwbmg subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e1c8238c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1336 identity=7491 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwbmg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1c8238c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1336 identity=7491 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwbmg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c41b087807 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1081 identity=7491 ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-4pxpl subsys=endpoint level=info msg="Successful endpoint creation" containerID=c41b087807 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1081 identity=7491 ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-4pxpl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e1c8238c2a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1336 identity=7491 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwbmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1c8238c2a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1336 identity=7491 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwbmg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.8 29fe851f-bd08-4360-b903-db2e46a9cca9 default }" containerID=429f0b0b4ddbec2f7bc0b9993ea585a137bab0d0bb8626553a0cacdb8f2b864d datapathConfiguration="&{false false false false false }" interface=lxcd6db3645f57c k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7cq2m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=429f0b0b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7cq2m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=429f0b0b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7cq2m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=429f0b0b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7cq2m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=429f0b0b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identity=57448 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7cq2m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=429f0b0b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identity=57448 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7cq2m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=429f0b0b4d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1209 identity=57448 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7cq2m subsys=endpoint level=info msg="Successful endpoint creation" containerID=429f0b0b4d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1209 identity=57448 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7cq2m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad46c5df69 endpointID=2756 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-hslqt subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=ad46c5df69 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2756 identity=7491 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hslqt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 c50600f0-2bef-45bd-b83a-3e8c277bfd82 default }" containerID=adcc8335f188f83a2be144e50a94a8280486f43b99cf8946219b281341786021 datapathConfiguration="&{false false false false false }" interface=lxc2088e8ffcfa8 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cm865 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.72 3ac6ed2c-f392-430f-a823-77d6a89ed13f default }" containerID=ea85946e636b4c2a780f37066743791aadb325892f28a3e75746a6288ede5845 datapathConfiguration="&{false false false false false }" interface=lxc12355d8457a8 k8sPodName=cert-manager/cert-manager-75c4c745bc-gxvwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adcc8335f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cm865 subsys=endpoint level=info msg="New endpoint" containerID=ea85946e63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3565 ipv4=10.0.0.72 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gxvwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adcc8335f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cm865 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=ea85946e63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3565 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.72 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gxvwh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=adcc8335f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cm865 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=ea85946e63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3565 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gxvwh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adcc8335f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=53520 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cm865 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adcc8335f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=53520 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cm865 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea85946e63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3565 identity=27386 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.72 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gxvwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea85946e63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3565 identity=27386 ipv4=10.0.0.72 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gxvwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 ab23101d-f135-4bfd-85d6-c0a704408d54 default }" containerID=e666381d474087eabb9a0320854fd5f46a061e78fbdc2da7cf0d0c832010e96a datapathConfiguration="&{false false false false false }" interface=lxcfe793dcaf55e k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lpcrf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e666381d47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3936 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lpcrf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e666381d47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3936 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lpcrf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e666381d47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3936 identity=58166 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lpcrf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e666381d47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3936 identity=58166 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lpcrf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=adcc8335f1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=483 identity=53520 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cm865 subsys=endpoint level=info msg="Successful endpoint creation" containerID=adcc8335f1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=483 identity=53520 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cm865 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ea85946e63 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3565 identity=27386 ipv4=10.0.0.72 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gxvwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea85946e63 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3565 identity=27386 ipv4=10.0.0.72 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gxvwh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e666381d47 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3936 identity=58166 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lpcrf subsys=endpoint level=info msg="Successful endpoint creation" containerID=e666381d47 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3936 identity=58166 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lpcrf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.30 d56edc1b-4d1b-43cf-825a-bc1e90bab514 default }" containerID=a0c5c1b5a12be7f2f444a28b4c6e1068b2a2fb0b8909d999fefb10ada84150f7 datapathConfiguration="&{false false false false false }" interface=lxc7cc5814caa0c k8sPodName=cert-manager/cert-manager-startupapicheck-74lwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0c5c1b5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-74lwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0c5c1b5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=394a35f3-2b34-4cc2-8554-14f1efaf6762,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=394a35f3-2b34-4cc2-8554-14f1efaf6762,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-74lwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=394a35f3-2b34-4cc2-8554-14f1efaf6762;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=394a35f3-2b34-4cc2-8554-14f1efaf6762;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0c5c1b5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 identity=26196 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=394a35f3-2b34-4cc2-8554-14f1efaf6762,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=394a35f3-2b34-4cc2-8554-14f1efaf6762,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-74lwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0c5c1b5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 identity=26196 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-74lwp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a0c5c1b5a1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=656 identity=26196 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-74lwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0c5c1b5a1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=656 identity=26196 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-74lwp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a0c5c1b5a1 endpointID=656 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-74lwp subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=394a35f3-2b34-4cc2-8554-14f1efaf6762 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=394a35f3-2b34-4cc2-8554-14f1efaf6762 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=a0c5c1b5a1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=656 identity=26196 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-74lwp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 ebea263f-fb2d-4a92-8a17-e4c8f89a390a default }" containerID=6460963d5a36ab3fae06bbcc67dfd7069fc8051c529b04fd0409c896de9224be datapathConfiguration="&{false false false false false }" interface=lxc4be32d201992 k8sPodName=ingress-nginx/ingress-nginx-admission-create-lfmfr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6460963d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 ipv4=10.0.0.30 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lfmfr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6460963d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c625bca9-2591-48f7-9819-b217496ec248,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c625bca9-2591-48f7-9819-b217496ec248,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.30 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lfmfr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c625bca9-2591-48f7-9819-b217496ec248;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=c625bca9-2591-48f7-9819-b217496ec248;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6460963d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=18632 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c625bca9-2591-48f7-9819-b217496ec248,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c625bca9-2591-48f7-9819-b217496ec248,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.30 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lfmfr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6460963d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=18632 ipv4=10.0.0.30 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lfmfr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6460963d5a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=66 identity=18632 ipv4=10.0.0.30 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lfmfr subsys=endpoint level=info msg="Successful endpoint creation" containerID=6460963d5a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=66 identity=18632 ipv4=10.0.0.30 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lfmfr subsys=daemon level=info msg="Delete endpoint request" containerID=6460963d5a endpointID=66 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-lfmfr subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c625bca9-2591-48f7-9819-b217496ec248 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=c625bca9-2591-48f7-9819-b217496ec248 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=6460963d5a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=66 identity=18632 ipv4=10.0.0.30 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lfmfr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 374cf416-dff8-4151-9a24-f824e626b90a default }" containerID=54ee33eb09e3ee377a956454c56da340507cabc05b309e1cf04041466647305c datapathConfiguration="&{false false false false false }" interface=lxc1f9c25886b30 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8s6vg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54ee33eb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8s6vg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54ee33eb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8s6vg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=54ee33eb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8s6vg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54ee33eb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identity=1159 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8s6vg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54ee33eb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identity=1159 ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8s6vg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54ee33eb09 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2410 identity=1159 ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8s6vg subsys=endpoint level=info msg="Successful endpoint creation" containerID=54ee33eb09 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2410 identity=1159 ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8s6vg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.152 b50d3150-3c7e-4c33-9299-7a51d5fc3562 default }" containerID=4c8192e18fbc6c509b2c86a001ed7d3a31f03c25118a250def16af46acf35a50 datapathConfiguration="&{false false false false false }" interface=lxc8038b404a590 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qltr4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c8192e18f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=727 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qltr4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c8192e18f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=727 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=9c5eab07-9ed0-41ca-a896-bede3326d4b4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=9c5eab07-9ed0-41ca-a896-bede3326d4b4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qltr4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=9c5eab07-9ed0-41ca-a896-bede3326d4b4;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=9c5eab07-9ed0-41ca-a896-bede3326d4b4;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c8192e18f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=727 identity=18625 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=9c5eab07-9ed0-41ca-a896-bede3326d4b4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=9c5eab07-9ed0-41ca-a896-bede3326d4b4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qltr4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c8192e18f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=727 identity=18625 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qltr4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c8192e18f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=727 identity=18625 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qltr4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c8192e18f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=727 identity=18625 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qltr4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c8192e18f endpointID=727 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-qltr4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=9c5eab07-9ed0-41ca-a896-bede3326d4b4 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=9c5eab07-9ed0-41ca-a896-bede3326d4b4 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=4c8192e18f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=727 identity=18625 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qltr4 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0bc4db48-7d49-4bf2-a10c-7d1986e4b0e7] Description:}]" policyAddRequest=376177ec-9c1a-4eff-b1d1-bef7e572f51e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=376177ec-9c1a-4eff-b1d1-bef7e572f51e policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=76ec0d2f-f629-4e0b-af54-2bc36af17841] Description:}]" policyAddRequest=9908bad8-71e8-4e5b-9ec9-4c41ee4765eb subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9908bad8-71e8-4e5b-9ec9-4c41ee4765eb policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.23 e85673d0-afd7-43ec-82ee-cc0a00ed3ea7 default }" containerID=82b7d134f858896a4fc07bd218acd6644afe63a0041aa8027ee4c3386767865e datapathConfiguration="&{false false false false false }" interface=lxc920fac6a7ade k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8zrr9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82b7d134f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3870 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8zrr9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82b7d134f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3870 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8zrr9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=82b7d134f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3870 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8zrr9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82b7d134f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3870 identity=17393 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8zrr9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82b7d134f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3870 identity=17393 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8zrr9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82b7d134f8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3870 identity=17393 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8zrr9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=82b7d134f8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3870 identity=17393 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8zrr9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.215 c0a63064-494d-45f3-9ee1-069d024cbc4a default }" containerID=c1fad3519964d174dfe809eb4fde02507b73a5f6be3a0ec92e62d521f14bc338 datapathConfiguration="&{false false false false false }" interface=lxccb0811d6f22e k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6pxhc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1fad35199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3108 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6pxhc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1fad35199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3108 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6pxhc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1fad35199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3108 identity=30823 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6pxhc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1fad35199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3108 identity=30823 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6pxhc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1fad35199 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3108 identity=30823 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6pxhc subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1fad35199 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3108 identity=30823 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6pxhc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.81 ac6598e0-4341-490e-9220-61cf983b8384 default }" containerID=480b32a367c2346f1af28f2eac1797c5b7687ae1f72b0fb75635c4d6e78b555b datapathConfiguration="&{false false false false false }" interface=lxcb0c2496b6d43 k8sPodName=openstack/pxc-operator-69cb5bbdb9-m8dzj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=480b32a367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m8dzj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=480b32a367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m8dzj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=480b32a367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identity=28918 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m8dzj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=480b32a367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identity=28918 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m8dzj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=480b32a367 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1283 identity=28918 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m8dzj subsys=endpoint level=info msg="Successful endpoint creation" containerID=480b32a367 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1283 identity=28918 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m8dzj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.206 275921f2-778b-46c7-a4bf-b228b35cf540 default }" containerID=3402c3158cdb223e13a7fd4c6a6d1aa99bb616c0b0021514a0f37a41ed523210 datapathConfiguration="&{false false false false false }" interface=lxcd1988f6f24ba k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3402c3158c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3402c3158c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3402c3158c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=4453 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3402c3158c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=4453 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3402c3158c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=236 identity=4453 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3402c3158c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=236 identity=4453 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.28 cf92ef26-1f9d-4a52-98df-6854b3263a94 default }" containerID=57cde6d8dc2039872dc8e252b45cbd35d29008fbc1dbce1d7dfc7583c7c26c84 datapathConfiguration="&{false false false false false }" interface=lxc430533f3cf62 k8sPodName=local-path-storage/helper-pod-create-pvc-691a2a48-0769-4212-9c22-b73da8788683 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57cde6d8dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-691a2a48-0769-4212-9c22-b73da8788683 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57cde6d8dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-691a2a48-0769-4212-9c22-b73da8788683 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57cde6d8dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=8353 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-691a2a48-0769-4212-9c22-b73da8788683 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57cde6d8dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=8353 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-691a2a48-0769-4212-9c22-b73da8788683 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57cde6d8dc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1777 identity=8353 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-691a2a48-0769-4212-9c22-b73da8788683 subsys=endpoint level=info msg="Successful endpoint creation" containerID=57cde6d8dc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1777 identity=8353 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-691a2a48-0769-4212-9c22-b73da8788683 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57cde6d8dc endpointID=1777 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-691a2a48-0769-4212-9c22-b73da8788683 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=57cde6d8dc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1777 identity=8353 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-691a2a48-0769-4212-9c22-b73da8788683 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 e6283dc8-74f9-46f0-8e70-685617d1a90f default }" containerID=90b91709eb5fedb385c05ac66311174cfdeee8511257e9a87e5a16301ed5640c datapathConfiguration="&{false false false false false }" interface=lxc8d6117beb1d3 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90b91709eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90b91709eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90b91709eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 identity=36791 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90b91709eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 identity=36791 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=90b91709eb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3730 identity=36791 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=90b91709eb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3730 identity=36791 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8c9526ac-0b9d-4e21-a726-6c30382d294b] Description:}]" policyAddRequest=8b9c3ed4-399f-4b27-bfc5-71e03c007bbe subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=8b9c3ed4-399f-4b27-bfc5-71e03c007bbe policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.158 3ec284d6-ad10-424b-82ff-a86307f6a0cc default }" containerID=42d0565098dff2aee58c8f343914d10f0fb8ef6cb6269cb1e0df989045a69fd5 datapathConfiguration="&{false false false false false }" interface=lxcd2a0193c49b5 k8sPodName=local-path-storage/helper-pod-create-pvc-1f99ca59-1158-4e1e-8508-9f7c54a49aa3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42d0565098 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1f99ca59-1158-4e1e-8508-9f7c54a49aa3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42d0565098 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1f99ca59-1158-4e1e-8508-9f7c54a49aa3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42d0565098 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 identity=8353 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1f99ca59-1158-4e1e-8508-9f7c54a49aa3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42d0565098 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 identity=8353 ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1f99ca59-1158-4e1e-8508-9f7c54a49aa3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42d0565098 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3648 identity=8353 ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1f99ca59-1158-4e1e-8508-9f7c54a49aa3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=42d0565098 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3648 identity=8353 ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1f99ca59-1158-4e1e-8508-9f7c54a49aa3 subsys=daemon level=info msg="Delete endpoint request" containerID=42d0565098 endpointID=3648 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1f99ca59-1158-4e1e-8508-9f7c54a49aa3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=42d0565098 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3648 identity=8353 ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1f99ca59-1158-4e1e-8508-9f7c54a49aa3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 af3bb488-8049-42c2-b39c-bbfc6394b883 default }" containerID=783a7746f8aff0eff5b1caeee3ba77ee22f440fb2f31ea9a96733d5507a47de7 datapathConfiguration="&{false false false false false }" interface=lxc8937c54abae6 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=783a7746f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3700 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=783a7746f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3700 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=783a7746f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3700 identity=3200 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=783a7746f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3700 identity=3200 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=783a7746f8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3700 identity=3200 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=783a7746f8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3700 identity=3200 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=0091120a-3f39-4225-ac68-db140d9950e0] Description:}]" policyAddRequest=e29b7b61-7fc0-4c95-b6ce-7df9ddafcf2e subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=e29b7b61-7fc0-4c95-b6ce-7df9ddafcf2e policyRevision=5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.111 71585ecd-86f5-482d-86fb-b5a79232f95f default }" containerID=70c63fbb30c2193fe732515bbc77c26e1ebe39681a7583e01ddf0ca0ce3f7365 datapathConfiguration="&{false false false false false }" interface=lxc73ef94cc2338 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70c63fbb30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 ipv4=10.0.0.111 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70c63fbb30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.111 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70c63fbb30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=48243 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.111 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70c63fbb30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=48243 ipv4=10.0.0.111 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70c63fbb30 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=535 identity=48243 ipv4=10.0.0.111 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70c63fbb30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=535 identity=48243 ipv4=10.0.0.111 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009668321452243429 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.106 81223671-6027-43af-b181-2ce2e70888ca default }" containerID=a21d71b39b9f257eaf11119b28444e049d08bfc0ebfcf9ee1da16a765766a18e datapathConfiguration="&{false false false false false }" interface=lxcc5b11c840a3e k8sPodName=monitoring/node-feature-discovery-worker-ktccl labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.227 2f2b954c-b765-4b1e-ad06-5d809322eea5 default }" containerID=6d175999788ac78bb153ee7a631c12a05e3ae2771b9e8efd3ed78b2affff244b datapathConfiguration="&{false false false false false }" interface=lxcab3be5ad809a k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bzfmk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a21d71b39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ktccl subsys=endpoint level=info msg="New endpoint" containerID=6d17599978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bzfmk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a21d71b39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ktccl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=6d17599978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bzfmk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a21d71b39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ktccl line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=6d17599978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bzfmk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a21d71b39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=3114 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ktccl oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=a21d71b39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=3114 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ktccl subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d17599978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identity=46014 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bzfmk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d17599978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1022 identity=46014 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bzfmk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 850a4a86-d49b-4f6b-900b-ec4f8fdfe719 default }" containerID=205fd0465ee03eb1dc8729c31c6cf71565b49a634e71a58131c42b8e835e9498 datapathConfiguration="&{false false false false false }" interface=lxca6ee00739b7e k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-t6tln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=205fd0465e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-t6tln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=205fd0465e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-t6tln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=205fd0465e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identity=5102 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-t6tln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=205fd0465e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identity=5102 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-t6tln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a21d71b39b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=439 identity=3114 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ktccl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a21d71b39b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=439 identity=3114 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-ktccl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6d17599978 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1022 identity=46014 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bzfmk subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d17599978 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1022 identity=46014 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bzfmk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=205fd0465e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2196 identity=5102 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-t6tln subsys=endpoint level=info msg="Successful endpoint creation" containerID=205fd0465e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2196 identity=5102 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-t6tln subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.73 02494afc-1403-4cd7-adec-f658a3d91099 default }" containerID=a907b8e9c1d2f9d017cc9efc24e1e0cbb13b2c2ca8d1fbf2eb297701e90e685e datapathConfiguration="&{false false false false false }" interface=lxc9add2d47af2b k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ctgvv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a907b8e9c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 ipv4=10.0.0.73 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ctgvv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a907b8e9c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.73 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ctgvv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a907b8e9c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 identity=13979 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.73 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ctgvv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a907b8e9c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 identity=13979 ipv4=10.0.0.73 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ctgvv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a907b8e9c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2078 identity=13979 ipv4=10.0.0.73 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ctgvv subsys=endpoint level=info msg="Successful endpoint creation" containerID=a907b8e9c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2078 identity=13979 ipv4=10.0.0.73 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ctgvv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=999 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-177-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00999 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00999 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00999 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00999:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=999 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 c63eed4c-d27a-4211-be6c-77f88c1b4429 default }" containerID=f6e82b886fd19bf147204d4a17277a8aa4aa9886acf2154f7e1526c3ed370a33 datapathConfiguration="&{false false false false false }" interface=lxce85755fdc02f k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9hkf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6e82b886f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9hkf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6e82b886f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d27354fc-8bb6-4993-9559-1db307102074,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d27354fc-8bb6-4993-9559-1db307102074,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9hkf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d27354fc-8bb6-4993-9559-1db307102074;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d27354fc-8bb6-4993-9559-1db307102074;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f6e82b886f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 identity=1983 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d27354fc-8bb6-4993-9559-1db307102074,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d27354fc-8bb6-4993-9559-1db307102074,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9hkf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6e82b886f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 identity=1983 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9hkf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6e82b886f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3596 identity=1983 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9hkf subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6e82b886f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3596 identity=1983 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9hkf subsys=daemon level=info msg="Delete endpoint request" containerID=f6e82b886f endpointID=3596 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-s9hkf subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d27354fc-8bb6-4993-9559-1db307102074 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d27354fc-8bb6-4993-9559-1db307102074 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f6e82b886f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3596 identity=1983 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s9hkf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 4bf17d8a-e6b9-4076-b494-8a7d8b513fec default }" containerID=bbc430b7e9fa33bb689a23041ef5a1c76d4692886ca73507ef74e48f6440350c datapathConfiguration="&{false false false false false }" interface=lxc4170d6bd3446 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mlssn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbc430b7e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mlssn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbc430b7e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mlssn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bbc430b7e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identity=24874 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mlssn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbc430b7e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identity=24874 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mlssn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bbc430b7e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3115 identity=24874 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mlssn subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbc430b7e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3115 identity=24874 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mlssn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.249 8d67f1be-bc0b-4f3f-bb76-9949742a8fbf default }" containerID=cada6031a2176d91814058bbf1335f8bd987214a637a284cbd8eb391db942b88 datapathConfiguration="&{false false false false false }" interface=lxc06d6489314d8 k8sPodName=monitoring/kube-prometheus-stack-grafana-76c64449fd-rgg7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cada6031a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76c64449fd-rgg7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cada6031a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76c64449fd-rgg7h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cada6031a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=36437 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76c64449fd-rgg7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cada6031a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=36437 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76c64449fd-rgg7h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 5889b9bd-36f2-42b7-9ae8-07af550dd95f default }" containerID=5dad8b892ab11937ffb2f9132699e46f8140aa01ca3b8450bcd9503ece24aadf datapathConfiguration="&{false false false false false }" interface=lxc0ee9f1e21dc7 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8xhbr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5dad8b892a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8xhbr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5dad8b892a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8xhbr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5dad8b892a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 identity=18390 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8xhbr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5dad8b892a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 identity=18390 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8xhbr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cada6031a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1173 identity=36437 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76c64449fd-rgg7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=cada6031a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1173 identity=36437 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76c64449fd-rgg7h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5dad8b892a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2329 identity=18390 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8xhbr subsys=endpoint level=info msg="Successful endpoint creation" containerID=5dad8b892a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2329 identity=18390 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8xhbr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 32e28ee2-01bd-49ee-9213-2f7ec4173af9 default }" containerID=3052f2060fcd7b7c6156968e951817966fff211c95df450a74d5d4497ee91fe4 datapathConfiguration="&{false false false false false }" interface=lxc312c3bc3974c k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xdfjp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3052f2060f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xdfjp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3052f2060f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=20248f21-a861-403f-849b-b22d8bfe16c9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=20248f21-a861-403f-849b-b22d8bfe16c9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xdfjp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=20248f21-a861-403f-849b-b22d8bfe16c9;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=20248f21-a861-403f-849b-b22d8bfe16c9;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3052f2060f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=15656 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=20248f21-a861-403f-849b-b22d8bfe16c9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=20248f21-a861-403f-849b-b22d8bfe16c9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xdfjp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3052f2060f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=15656 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xdfjp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3052f2060f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=393 identity=15656 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xdfjp subsys=endpoint level=info msg="Successful endpoint creation" containerID=3052f2060f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=393 identity=15656 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xdfjp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 4d3e05d4-f7c8-4ff9-b4e9-ab0f3ef60d02 default }" containerID=ea4e3a8ccfd214a72b761886dca2a2876b0b8b357ab4886decf6b396425a22ec datapathConfiguration="&{false false false false false }" interface=lxca2e7e99f1933 k8sPodName=local-path-storage/helper-pod-create-pvc-fd885389-9ee3-4583-afce-2e801806826b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea4e3a8ccf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3737 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd885389-9ee3-4583-afce-2e801806826b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea4e3a8ccf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3737 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd885389-9ee3-4583-afce-2e801806826b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea4e3a8ccf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3737 identity=8353 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd885389-9ee3-4583-afce-2e801806826b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea4e3a8ccf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3737 identity=8353 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd885389-9ee3-4583-afce-2e801806826b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea4e3a8ccf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3737 identity=8353 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd885389-9ee3-4583-afce-2e801806826b subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea4e3a8ccf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3737 identity=8353 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd885389-9ee3-4583-afce-2e801806826b subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.94 1f1a1eea-336d-421f-bfe2-2e51f40d36c7 default }" containerID=204003314f54dbe0385715dae58b8d7948f3914e075715ba969b3feb8e5b129f datapathConfiguration="&{false false false false false }" interface=lxc2c7cc815ec76 k8sPodName=local-path-storage/helper-pod-create-pvc-1541a26f-a940-4c9e-bb7c-cbdcd5822be9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=204003314f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1541a26f-a940-4c9e-bb7c-cbdcd5822be9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=204003314f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1541a26f-a940-4c9e-bb7c-cbdcd5822be9 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=204003314f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identity=8353 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1541a26f-a940-4c9e-bb7c-cbdcd5822be9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=204003314f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identity=8353 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1541a26f-a940-4c9e-bb7c-cbdcd5822be9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=204003314f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=488 identity=8353 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1541a26f-a940-4c9e-bb7c-cbdcd5822be9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=204003314f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=488 identity=8353 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1541a26f-a940-4c9e-bb7c-cbdcd5822be9 subsys=daemon level=info msg="Delete endpoint request" containerID=3052f2060f endpointID=393 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-xdfjp subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=20248f21-a861-403f-849b-b22d8bfe16c9 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=20248f21-a861-403f-849b-b22d8bfe16c9 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=3052f2060f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=393 identity=15656 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xdfjp subsys=endpoint level=info msg="Delete endpoint request" containerID=204003314f endpointID=488 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1541a26f-a940-4c9e-bb7c-cbdcd5822be9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=ea4e3a8ccf endpointID=3737 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fd885389-9ee3-4583-afce-2e801806826b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=204003314f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=488 identity=8353 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1541a26f-a940-4c9e-bb7c-cbdcd5822be9 subsys=endpoint level=info msg="Removed endpoint" containerID=ea4e3a8ccf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3737 identity=8353 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd885389-9ee3-4583-afce-2e801806826b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 eda5cb3f-7d26-4a16-8549-9862dd0652c2 default }" containerID=263b4085509c47fbcc954c74d0642e9d13ed904cf30a59d196f24094777d51ab datapathConfiguration="&{false false false false false }" interface=lxc0bef4c3193d0 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=263b408550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=263b408550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=263b408550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identity=3549 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=263b408550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identity=3549 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=263b408550 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1361 identity=3549 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=263b408550 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1361 identity=3549 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.193 9844ac42-48c9-457b-bb28-d7d1e9cc6264 default }" containerID=501c91b6e8b1c91972e0f0d4bd3d913328b3e0920f202a8909589258f082f8f3 datapathConfiguration="&{false false false false false }" interface=lxc01886d12a199 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=501c91b6e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=501c91b6e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=501c91b6e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=26441 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=501c91b6e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=26441 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=501c91b6e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=65 identity=26441 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=501c91b6e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=65 identity=26441 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 d3496525-0780-46e0-9026-295ffb513016 default }" containerID=82f1c8a74243b427bb730886d93ad708b1723ab70f9805d7ce16307eb2761431 datapathConfiguration="&{false false false false false }" interface=lxc3e6a64c973ee k8sPodName=monitoring/loki-gateway-cf54cb88c-xpvpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82f1c8a742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2042 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xpvpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82f1c8a742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2042 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xpvpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82f1c8a742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2042 identity=15038 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xpvpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82f1c8a742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2042 identity=15038 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xpvpv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 f26f6638-e5fc-423b-a3ba-f3313936c802 default }" containerID=348010bb5ea5e582aa94309f555d1800fe11495fccd9544f24d3520e1cc7bb63 datapathConfiguration="&{false false false false false }" interface=lxc77076aa68778 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=348010bb5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2923 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=348010bb5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2923 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=348010bb5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2923 identity=13408 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=348010bb5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2923 identity=13408 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82f1c8a742 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2042 identity=15038 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xpvpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=82f1c8a742 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2042 identity=15038 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xpvpv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=348010bb5e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2923 identity=13408 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=348010bb5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2923 identity=13408 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 42283485-e2f0-4f8b-9d23-4f78527b9bdb default }" containerID=65fe64e7a27b119208679f3d6251808a842950ac844ed6e4b4e859cbf921ef86 datapathConfiguration="&{false false false false false }" interface=lxc1be9afdd3253 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65fe64e7a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65fe64e7a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65fe64e7a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identity=5837 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65fe64e7a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identity=5837 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=65fe64e7a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1597 identity=5837 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65fe64e7a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1597 identity=5837 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.165 9c307829-fc15-47c2-8245-b182969089f0 default }" containerID=e2263cb81e929043cf32bcc8ee36e9b602352f421736489c3a08f7b2bdd4357a datapathConfiguration="&{false false false false false }" interface=lxc090eb818834d k8sPodName=local-path-storage/helper-pod-create-pvc-75795f54-8b3a-49c1-8fa1-0e872fbec1b1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2263cb81e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75795f54-8b3a-49c1-8fa1-0e872fbec1b1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2263cb81e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75795f54-8b3a-49c1-8fa1-0e872fbec1b1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2263cb81e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identity=8353 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75795f54-8b3a-49c1-8fa1-0e872fbec1b1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2263cb81e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identity=8353 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75795f54-8b3a-49c1-8fa1-0e872fbec1b1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2263cb81e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=645 identity=8353 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75795f54-8b3a-49c1-8fa1-0e872fbec1b1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2263cb81e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=645 identity=8353 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75795f54-8b3a-49c1-8fa1-0e872fbec1b1 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.131 cdb711d0-f978-4225-8f36-534aeda01092 default }" containerID=3ff75117259b674f4bf0018975b93c7d6290d8f82926bc2769f4279fab293612 datapathConfiguration="&{false false false false false }" interface=lxc4d57f020298a k8sPodName=monitoring/vector-vtrn4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ff7511725 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=58 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-vtrn4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ff7511725 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=58 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-vtrn4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ff7511725 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=58 identity=28078 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-vtrn4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ff7511725 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=58 identity=28078 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-vtrn4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ff7511725 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=58 identity=28078 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-vtrn4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ff7511725 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=58 identity=28078 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-vtrn4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e2263cb81e endpointID=645 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-75795f54-8b3a-49c1-8fa1-0e872fbec1b1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e2263cb81e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=645 identity=8353 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75795f54-8b3a-49c1-8fa1-0e872fbec1b1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 4b1188c9-534e-4e5c-89a8-c937eb9680a9 default }" containerID=9f1ee923796370f319651175f20086e203200264bc7e88131752c9a6a4618028 datapathConfiguration="&{false false false false false }" interface=lxc93ee9b5b39f8 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f1ee92379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f1ee92379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f1ee92379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identity=37956 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f1ee92379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identity=37956 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9f1ee92379 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2044 identity=37956 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f1ee92379 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2044 identity=37956 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.243 858e4662-0d1a-4620-a058-34280c5547d9 default }" containerID=daacdcf1d270a1aefdf140a5883add54f9aa4dbf7fc4dc35dbf870e33e2f91b3 datapathConfiguration="&{false false false false false }" interface=lxc0ab1352906fc k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kkd9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=daacdcf1d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kkd9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=daacdcf1d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kkd9x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=daacdcf1d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 identity=11682 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kkd9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=daacdcf1d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 identity=11682 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kkd9x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=daacdcf1d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2798 identity=11682 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kkd9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=daacdcf1d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2798 identity=11682 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kkd9x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 809db24a-7317-40a2-afa9-753450eb8334 default }" containerID=097764acc94e597ff8999f91f4b4f5ece1d220c6a3a6babd2935e1f196eeb5f6 datapathConfiguration="&{false false false false false }" interface=lxc8a1e780a77fb k8sPodName=openstack/memcached-memcached-6479589586-62sqc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=097764acc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-62sqc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=097764acc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-62sqc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=097764acc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 identity=33169 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-62sqc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=097764acc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 identity=33169 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-62sqc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=097764acc9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3375 identity=33169 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-62sqc subsys=endpoint level=info msg="Successful endpoint creation" containerID=097764acc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3375 identity=33169 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-62sqc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.60 0f27127c-8964-49cb-a6e1-52f68a205596 default }" containerID=5693b2200dc1f5b00903917c5126337ebe4bef6e376e81a73bb4ca3f02a21cca datapathConfiguration="&{false false false false false }" interface=lxcf16003e46b70 k8sPodName=local-path-storage/helper-pod-create-pvc-f9ba167a-6d54-479d-abb0-3a3d29e13c86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5693b2200d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9ba167a-6d54-479d-abb0-3a3d29e13c86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5693b2200d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9ba167a-6d54-479d-abb0-3a3d29e13c86 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5693b2200d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identity=8353 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9ba167a-6d54-479d-abb0-3a3d29e13c86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5693b2200d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identity=8353 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9ba167a-6d54-479d-abb0-3a3d29e13c86 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5693b2200d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=508 identity=8353 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9ba167a-6d54-479d-abb0-3a3d29e13c86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5693b2200d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=508 identity=8353 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9ba167a-6d54-479d-abb0-3a3d29e13c86 subsys=daemon level=info msg="Delete endpoint request" containerID=5693b2200d endpointID=508 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f9ba167a-6d54-479d-abb0-3a3d29e13c86 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5693b2200d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=508 identity=8353 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9ba167a-6d54-479d-abb0-3a3d29e13c86 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 fb73cae6-bbf4-4753-bf6d-d92a260a459b default }" containerID=8a9ab88ab3e78d7f023c06cc8c86e5b52f6437eb12b5c14d31e7cab77cede8a5 datapathConfiguration="&{false false false false false }" interface=lxcee5e6793e4bb k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a9ab88ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a9ab88ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a9ab88ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 identity=23568 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a9ab88ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 identity=23568 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a9ab88ab3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3221 identity=23568 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a9ab88ab3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3221 identity=23568 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.164 46ee5df1-9174-4672-94ea-de346a761109 default }" containerID=4c3f82b33fab410a7c27606a096560839d5b35fc3845de3a934157a83d6fa6f4 datapathConfiguration="&{false false false false false }" interface=lxc561415853969 k8sPodName=openstack/keystone-api-78cd776787-rns8z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c3f82b33f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-78cd776787-rns8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c3f82b33f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-78cd776787-rns8z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4c3f82b33f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-78cd776787-rns8z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c3f82b33f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identity=3242 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-78cd776787-rns8z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c3f82b33f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identity=3242 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-78cd776787-rns8z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 d6c84734-bcd9-4a0f-b3a0-b668d4b262fe default }" containerID=51d1067607340224e84cd0d841f360d17c6f9acf21a335f4161452f73b0fd8a5 datapathConfiguration="&{false false false false false }" interface=lxcaeb2d1211448 k8sPodName=openstack/keystone-credential-setup-676jh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51d1067607 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4009 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-credential-setup-676jh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51d1067607 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4009 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ced8de03-df44-4167-8ab0-7ba108468e69,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=ced8de03-df44-4167-8ab0-7ba108468e69,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-credential-setup-676jh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ced8de03-df44-4167-8ab0-7ba108468e69;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=ced8de03-df44-4167-8ab0-7ba108468e69;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51d1067607 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4009 identity=36985 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ced8de03-df44-4167-8ab0-7ba108468e69,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=ced8de03-df44-4167-8ab0-7ba108468e69,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-credential-setup-676jh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51d1067607 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4009 identity=36985 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-credential-setup-676jh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c3f82b33f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=554 identity=3242 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-78cd776787-rns8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c3f82b33f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=554 identity=3242 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-78cd776787-rns8z subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=51d1067607 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4009 identity=36985 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-credential-setup-676jh subsys=endpoint level=info msg="Successful endpoint creation" containerID=51d1067607 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4009 identity=36985 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-credential-setup-676jh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=51d1067607 endpointID=4009 k8sNamespace=openstack k8sPodName=keystone-credential-setup-676jh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ced8de03-df44-4167-8ab0-7ba108468e69 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=ced8de03-df44-4167-8ab0-7ba108468e69 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=51d1067607 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4009 identity=36985 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-credential-setup-676jh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 1786f6c0-9042-4063-aad7-ad105441b529 default }" containerID=d3fd3fdec709cdab2e31fc8812938bf688ef3f67098dfc4f267145c91cb54382 datapathConfiguration="&{false false false false false }" interface=lxc5ca6e3cb88d0 k8sPodName=openstack/keystone-db-init-8bqpm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3fd3fdec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2025 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-db-init-8bqpm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3fd3fdec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2025 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=52582413-2f9b-43bc-80cf-da516fd0c1ec,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=52582413-2f9b-43bc-80cf-da516fd0c1ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-db-init-8bqpm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=52582413-2f9b-43bc-80cf-da516fd0c1ec;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=52582413-2f9b-43bc-80cf-da516fd0c1ec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d3fd3fdec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2025 identity=62766 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=52582413-2f9b-43bc-80cf-da516fd0c1ec,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=52582413-2f9b-43bc-80cf-da516fd0c1ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-db-init-8bqpm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3fd3fdec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2025 identity=62766 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-db-init-8bqpm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3fd3fdec7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2025 identity=62766 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-db-init-8bqpm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3fd3fdec7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2025 identity=62766 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-db-init-8bqpm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d3fd3fdec7 endpointID=2025 k8sNamespace=openstack k8sPodName=keystone-db-init-8bqpm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=52582413-2f9b-43bc-80cf-da516fd0c1ec k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=52582413-2f9b-43bc-80cf-da516fd0c1ec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d3fd3fdec7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2025 identity=62766 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-db-init-8bqpm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 68cd9d01-da13-492a-b706-7159eb22784c default }" containerID=4e6514f895afd05be944ceb8db0daf1b6a9942f407121b63bd20902dd67a0b34 datapathConfiguration="&{false false false false false }" interface=lxc5ae8c5a8f384 k8sPodName=openstack/keystone-fernet-setup-8tns5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e6514f895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-8tns5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e6514f895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5b3fc46e-4624-41b9-80a3-8035bc70e84b,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5b3fc46e-4624-41b9-80a3-8035bc70e84b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-8tns5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4e6514f895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-8tns5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5b3fc46e-4624-41b9-80a3-8035bc70e84b;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=5b3fc46e-4624-41b9-80a3-8035bc70e84b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e6514f895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=63954 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5b3fc46e-4624-41b9-80a3-8035bc70e84b,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5b3fc46e-4624-41b9-80a3-8035bc70e84b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-8tns5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e6514f895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=63954 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-8tns5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e6514f895 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=124 identity=63954 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-8tns5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e6514f895 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=63954 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-8tns5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e6514f895 endpointID=124 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-8tns5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5b3fc46e-4624-41b9-80a3-8035bc70e84b k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=5b3fc46e-4624-41b9-80a3-8035bc70e84b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4e6514f895 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=63954 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-fernet-setup-8tns5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 9fc10512-5ae8-4685-92c5-7d467201d21b default }" containerID=10dfbb6aa9d05a01aef9f32f8b80ee1a9ea95794325a8cdd661b1cc48145dbfd datapathConfiguration="&{false false false false false }" interface=lxcb1b2b6c083d3 k8sPodName=openstack/keystone-db-sync-qzkjw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10dfbb6aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-sync-qzkjw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10dfbb6aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3fa94af9-d96c-42cd-90f2-6bdfc3fd4776,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=3fa94af9-d96c-42cd-90f2-6bdfc3fd4776,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-sync-qzkjw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3fa94af9-d96c-42cd-90f2-6bdfc3fd4776;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=3fa94af9-d96c-42cd-90f2-6bdfc3fd4776;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10dfbb6aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=45684 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3fa94af9-d96c-42cd-90f2-6bdfc3fd4776,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=3fa94af9-d96c-42cd-90f2-6bdfc3fd4776,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-sync-qzkjw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10dfbb6aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=45684 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-sync-qzkjw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=10dfbb6aa9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=133 identity=45684 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-sync-qzkjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=10dfbb6aa9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=133 identity=45684 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-sync-qzkjw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=10dfbb6aa9 endpointID=133 k8sNamespace=openstack k8sPodName=keystone-db-sync-qzkjw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3fa94af9-d96c-42cd-90f2-6bdfc3fd4776 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=3fa94af9-d96c-42cd-90f2-6bdfc3fd4776 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=10dfbb6aa9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=133 identity=45684 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-sync-qzkjw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 a04528e4-4ad9-4251-b134-7836dc6a88f4 default }" containerID=a1dafdf44b4908d2f96c156b9ab45984027a73dc2889405d26420235c27158fd datapathConfiguration="&{false false false false false }" interface=lxcd238aad25108 k8sPodName=openstack/keystone-rabbit-init-tb42v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1dafdf44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-rabbit-init-tb42v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1dafdf44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9bda2bf5-6235-4599-a30c-284e7184474f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9bda2bf5-6235-4599-a30c-284e7184474f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-rabbit-init-tb42v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a1dafdf44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-rabbit-init-tb42v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9bda2bf5-6235-4599-a30c-284e7184474f;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9bda2bf5-6235-4599-a30c-284e7184474f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1dafdf44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identity=14728 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9bda2bf5-6235-4599-a30c-284e7184474f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9bda2bf5-6235-4599-a30c-284e7184474f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-rabbit-init-tb42v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1dafdf44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identity=14728 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-rabbit-init-tb42v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1dafdf44b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3634 identity=14728 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-rabbit-init-tb42v subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1dafdf44b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3634 identity=14728 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-rabbit-init-tb42v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a1dafdf44b endpointID=3634 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-tb42v subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9bda2bf5-6235-4599-a30c-284e7184474f k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9bda2bf5-6235-4599-a30c-284e7184474f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a1dafdf44b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3634 identity=14728 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-rabbit-init-tb42v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 4f094c37-7212-443e-8165-85ef458e8c0e default }" containerID=5829a94dd3f2be43e1ba39aa12e8285ed022ca11feb4ccc3c17f4afa876fcc07 datapathConfiguration="&{false false false false false }" interface=lxced21294087f3 k8sPodName=openstack/keystone-domain-manage-z5dhd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5829a94dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-z5dhd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5829a94dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6183e761-689a-45c0-9510-5d6758905d81,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=6183e761-689a-45c0-9510-5d6758905d81,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-z5dhd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6183e761-689a-45c0-9510-5d6758905d81;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=6183e761-689a-45c0-9510-5d6758905d81;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5829a94dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 identity=46247 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6183e761-689a-45c0-9510-5d6758905d81,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=6183e761-689a-45c0-9510-5d6758905d81,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-z5dhd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5829a94dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 identity=46247 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-z5dhd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5829a94dd3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2132 identity=46247 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-z5dhd subsys=endpoint level=info msg="Successful endpoint creation" containerID=5829a94dd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2132 identity=46247 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-z5dhd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5829a94dd3 endpointID=2132 k8sNamespace=openstack k8sPodName=keystone-domain-manage-z5dhd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6183e761-689a-45c0-9510-5d6758905d81 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=6183e761-689a-45c0-9510-5d6758905d81 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5829a94dd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2132 identity=46247 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-z5dhd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 8c6b2a01-36e3-48b0-95d3-a253a1468c68 default }" containerID=9a71ffd0ad17174426dfb041a77aeeed73dc7e4ff865cf8de55fab223a2b41a1 datapathConfiguration="&{false false false false false }" interface=lxc4f1c805e2148 k8sPodName=openstack/keystone-bootstrap-bqg68 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a71ffd0ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-bqg68 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a71ffd0ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7f0ebd47-2a22-4afe-96ea-5746eff8a0b2,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=7f0ebd47-2a22-4afe-96ea-5746eff8a0b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-bqg68 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7f0ebd47-2a22-4afe-96ea-5746eff8a0b2;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=7f0ebd47-2a22-4afe-96ea-5746eff8a0b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a71ffd0ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=31551 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7f0ebd47-2a22-4afe-96ea-5746eff8a0b2,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=7f0ebd47-2a22-4afe-96ea-5746eff8a0b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-bqg68 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a71ffd0ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=31551 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-bqg68 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a71ffd0ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=167 identity=31551 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-bqg68 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a71ffd0ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=167 identity=31551 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-bqg68 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9a71ffd0ad endpointID=167 k8sNamespace=openstack k8sPodName=keystone-bootstrap-bqg68 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7f0ebd47-2a22-4afe-96ea-5746eff8a0b2 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=7f0ebd47-2a22-4afe-96ea-5746eff8a0b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9a71ffd0ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=167 identity=31551 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-bqg68 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 35e02a15-f8ba-4edc-932d-87372492720f default }" containerID=22d50679e13ec651e7fc01e56ac9e6e0b13c0ee58c1d2ebf30713076b05c4cec datapathConfiguration="&{false false false false false }" interface=lxcee5d0dbc041d k8sPodName=local-path-storage/helper-pod-create-pvc-fbfbc032-4e83-49b7-bc7b-7f5f74dacba8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22d50679e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fbfbc032-4e83-49b7-bc7b-7f5f74dacba8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22d50679e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fbfbc032-4e83-49b7-bc7b-7f5f74dacba8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22d50679e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identity=8353 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fbfbc032-4e83-49b7-bc7b-7f5f74dacba8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22d50679e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identity=8353 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fbfbc032-4e83-49b7-bc7b-7f5f74dacba8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22d50679e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3466 identity=8353 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fbfbc032-4e83-49b7-bc7b-7f5f74dacba8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22d50679e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3466 identity=8353 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fbfbc032-4e83-49b7-bc7b-7f5f74dacba8 subsys=daemon level=info msg="Delete endpoint request" containerID=22d50679e1 endpointID=3466 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fbfbc032-4e83-49b7-bc7b-7f5f74dacba8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=22d50679e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3466 identity=8353 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fbfbc032-4e83-49b7-bc7b-7f5f74dacba8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 7ff6c93d-6b46-4c33-9760-ead90c678eca default }" containerID=16d3fe66b984d472ec8388e7e83e75591c6322ba1a4f893f9251aa35f43383ef datapathConfiguration="&{false false false false false }" interface=lxc80b6c934ff4c k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16d3fe66b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16d3fe66b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=16d3fe66b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identity=52213 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16d3fe66b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identity=52213 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=16d3fe66b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3033 identity=52213 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=16d3fe66b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3033 identity=52213 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.209 78a726a5-6579-4222-83b8-ccce337c929d default }" containerID=1573ea70eb2b3d70e5e297096355005bf296d1decd57db6ec72ceb82a99517fe datapathConfiguration="&{false false false false false }" interface=lxc6d988df29991 k8sPodName=openstack/barbican-api-5dc96c46b9-wl4zl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1573ea70eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-api-5dc96c46b9-wl4zl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1573ea70eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-api-5dc96c46b9-wl4zl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1573ea70eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-api-5dc96c46b9-wl4zl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1573ea70eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 identity=2618 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-api-5dc96c46b9-wl4zl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1573ea70eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 identity=2618 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-api-5dc96c46b9-wl4zl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 44512b9e-e551-4397-ad8b-99730a738a61 default }" containerID=f202fcd02820788757e91cb0b255a70bc908f7c3872a1d353fabc0d8e5b30db9 datapathConfiguration="&{false false false false false }" interface=lxca316caf6a426 k8sPodName=openstack/barbican-db-init-ljk9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f202fcd028 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-db-init-ljk9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f202fcd028 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4d56d3c4-d013-4213-a5e0-9b8ba4c84227,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=4d56d3c4-d013-4213-a5e0-9b8ba4c84227,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-db-init-ljk9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4d56d3c4-d013-4213-a5e0-9b8ba4c84227;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=4d56d3c4-d013-4213-a5e0-9b8ba4c84227;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f202fcd028 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identity=15483 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4d56d3c4-d013-4213-a5e0-9b8ba4c84227,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=4d56d3c4-d013-4213-a5e0-9b8ba4c84227,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-db-init-ljk9d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f202fcd028 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identity=15483 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-db-init-ljk9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1573ea70eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3516 identity=2618 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-api-5dc96c46b9-wl4zl subsys=endpoint level=info msg="Successful endpoint creation" containerID=1573ea70eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3516 identity=2618 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-api-5dc96c46b9-wl4zl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f202fcd028 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1347 identity=15483 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-db-init-ljk9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=f202fcd028 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1347 identity=15483 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-db-init-ljk9d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f202fcd028 endpointID=1347 k8sNamespace=openstack k8sPodName=barbican-db-init-ljk9d subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4d56d3c4-d013-4213-a5e0-9b8ba4c84227 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=4d56d3c4-d013-4213-a5e0-9b8ba4c84227 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f202fcd028 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1347 identity=15483 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-db-init-ljk9d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 6bf26aef-4b81-41b0-b80f-3234e2b658a7 default }" containerID=bbcedd04a76ab1e63b4014f6931d679ff796f6f1d9b3c06ba814e4ba0e37294f datapathConfiguration="&{false false false false false }" interface=lxc1538c4782b60 k8sPodName=openstack/barbican-db-sync-kvxg6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbcedd04a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-kvxg6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbcedd04a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8a2b51ab-ae61-4a81-a90a-5c8de2d17c9d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8a2b51ab-ae61-4a81-a90a-5c8de2d17c9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-kvxg6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8a2b51ab-ae61-4a81-a90a-5c8de2d17c9d;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=8a2b51ab-ae61-4a81-a90a-5c8de2d17c9d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bbcedd04a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-kvxg6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bbcedd04a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 identity=8945 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8a2b51ab-ae61-4a81-a90a-5c8de2d17c9d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8a2b51ab-ae61-4a81-a90a-5c8de2d17c9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-kvxg6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbcedd04a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 identity=8945 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-kvxg6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bbcedd04a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=942 identity=8945 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-kvxg6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbcedd04a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=942 identity=8945 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-kvxg6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bbcedd04a7 endpointID=942 k8sNamespace=openstack k8sPodName=barbican-db-sync-kvxg6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8a2b51ab-ae61-4a81-a90a-5c8de2d17c9d k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=8a2b51ab-ae61-4a81-a90a-5c8de2d17c9d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bbcedd04a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=942 identity=8945 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-kvxg6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 4fa31af1-b85d-4cab-97e4-8afe1742dcb9 default }" containerID=b4732b69a584dae296fddbacabbd67aa5c7988ad82d508369b37607039c0b286 datapathConfiguration="&{false false false false false }" interface=lxc4080374e74c6 k8sPodName=openstack/barbican-rabbit-init-hmctn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4732b69a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3136 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-rabbit-init-hmctn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4732b69a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3136 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=45499011-1020-4023-b81e-7b9a4ba8b424,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=45499011-1020-4023-b81e-7b9a4ba8b424,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-rabbit-init-hmctn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=45499011-1020-4023-b81e-7b9a4ba8b424;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=45499011-1020-4023-b81e-7b9a4ba8b424;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4732b69a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3136 identity=35351 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=45499011-1020-4023-b81e-7b9a4ba8b424,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=45499011-1020-4023-b81e-7b9a4ba8b424,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-rabbit-init-hmctn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4732b69a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3136 identity=35351 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-rabbit-init-hmctn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4732b69a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3136 identity=35351 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-rabbit-init-hmctn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4732b69a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3136 identity=35351 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-rabbit-init-hmctn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03630946744761725 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=b4732b69a5 endpointID=3136 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-hmctn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=45499011-1020-4023-b81e-7b9a4ba8b424 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=45499011-1020-4023-b81e-7b9a4ba8b424 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b4732b69a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3136 identity=35351 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-rabbit-init-hmctn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 53a133f3-1e45-4e1d-a948-0910dd84981e default }" containerID=3be81658733e5fa4afb5ec62eb6673e54efa40dfd2eb00e098187133ada5982b datapathConfiguration="&{false false false false false }" interface=lxc2317d2d4dc0d k8sPodName=openstack/barbican-ks-service-ddq8f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3be8165873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2674 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-ks-service-ddq8f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3be8165873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2674 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=83965385-e64f-408c-b260-8cd83c01980d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=83965385-e64f-408c-b260-8cd83c01980d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-ks-service-ddq8f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3be8165873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2674 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-ks-service-ddq8f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=83965385-e64f-408c-b260-8cd83c01980d;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=83965385-e64f-408c-b260-8cd83c01980d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3be8165873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2674 identity=26485 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=83965385-e64f-408c-b260-8cd83c01980d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=83965385-e64f-408c-b260-8cd83c01980d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-ks-service-ddq8f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3be8165873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2674 identity=26485 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-ks-service-ddq8f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3be8165873 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2674 identity=26485 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-ks-service-ddq8f subsys=endpoint level=info msg="Successful endpoint creation" containerID=3be8165873 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2674 identity=26485 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-ks-service-ddq8f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3be8165873 endpointID=2674 k8sNamespace=openstack k8sPodName=barbican-ks-service-ddq8f subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=83965385-e64f-408c-b260-8cd83c01980d k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=83965385-e64f-408c-b260-8cd83c01980d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3be8165873 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2674 identity=26485 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-ks-service-ddq8f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 8b5470a3-ff92-49e6-bc6e-8afa5ca29a95 default }" containerID=6a7cb951016da843d7da8f8cc8df7ced54cde0e66dad414b408d29fc0a244452 datapathConfiguration="&{false false false false false }" interface=lxc8cc873bcb2a9 k8sPodName=openstack/barbican-ks-endpoints-jd68j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a7cb95101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jd68j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a7cb95101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=606e629e-8216-44c7-adf8-d853afaec366,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=606e629e-8216-44c7-adf8-d853afaec366,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jd68j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=606e629e-8216-44c7-adf8-d853afaec366;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=606e629e-8216-44c7-adf8-d853afaec366;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6a7cb95101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identity=8117 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=606e629e-8216-44c7-adf8-d853afaec366,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=606e629e-8216-44c7-adf8-d853afaec366,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jd68j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a7cb95101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identity=8117 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jd68j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a7cb95101 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=900 identity=8117 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jd68j subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a7cb95101 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=900 identity=8117 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jd68j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6a7cb95101 endpointID=900 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-jd68j subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=606e629e-8216-44c7-adf8-d853afaec366 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=606e629e-8216-44c7-adf8-d853afaec366 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6a7cb95101 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=900 identity=8117 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jd68j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 1d96dd1a-a141-42fb-acef-e3e5a2531471 default }" containerID=1e3af64a88c105b8a3382884caa1923b55967d49a1bcc305d33892dcaed88608 datapathConfiguration="&{false false false false false }" interface=lxccdced65d52ac k8sPodName=openstack/barbican-ks-user-s8p5h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e3af64a88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-s8p5h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e3af64a88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c368dc12-6405-432b-99a6-dcdec4226d80,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=c368dc12-6405-432b-99a6-dcdec4226d80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-s8p5h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c368dc12-6405-432b-99a6-dcdec4226d80;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=c368dc12-6405-432b-99a6-dcdec4226d80;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e3af64a88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identity=63913 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c368dc12-6405-432b-99a6-dcdec4226d80,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=c368dc12-6405-432b-99a6-dcdec4226d80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-s8p5h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e3af64a88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identity=63913 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-s8p5h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1e3af64a88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=116 identity=63913 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-s8p5h subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e3af64a88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=116 identity=63913 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-s8p5h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e3af64a88 endpointID=116 k8sNamespace=openstack k8sPodName=barbican-ks-user-s8p5h subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c368dc12-6405-432b-99a6-dcdec4226d80 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=c368dc12-6405-432b-99a6-dcdec4226d80 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1e3af64a88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=116 identity=63913 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-s8p5h subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.83 511eecdc-d9ee-4038-a58c-d62376e28e7e default }" containerID=b05b06511157b3e7e444434b83d104e360aab38a434a9d9bc2ae23b6d88eb873 datapathConfiguration="&{false false false false false }" interface=lxc01720140f9ee k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kvpzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b05b065111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 ipv4=10.0.0.83 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kvpzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b05b065111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.83 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kvpzm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b05b065111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kvpzm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b05b065111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 identity=6066 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.83 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kvpzm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b05b065111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=705 identity=6066 ipv4=10.0.0.83 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kvpzm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b05b065111 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=705 identity=6066 ipv4=10.0.0.83 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kvpzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b05b065111 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=705 identity=6066 ipv4=10.0.0.83 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kvpzm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 c84982f1-f6a4-48dc-a289-13c8e6c4b2dd default }" containerID=9645049aa848160d3625585130245c05b64f1a8ab2a577383d771b435ffff029 datapathConfiguration="&{false false false false false }" interface=lxcb6b7d4648781 k8sPodName=openstack/rook-ceph-detect-version-wqcsq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9645049aa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wqcsq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9645049aa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=3bd033b3-0ff7-491c-b8bb-e502e3d7344f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=3bd033b3-0ff7-491c-b8bb-e502e3d7344f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wqcsq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=3bd033b3-0ff7-491c-b8bb-e502e3d7344f;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=3bd033b3-0ff7-491c-b8bb-e502e3d7344f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9645049aa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 identity=12675 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=3bd033b3-0ff7-491c-b8bb-e502e3d7344f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=3bd033b3-0ff7-491c-b8bb-e502e3d7344f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wqcsq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9645049aa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 identity=12675 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wqcsq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9645049aa8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3748 identity=12675 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wqcsq subsys=endpoint level=info msg="Successful endpoint creation" containerID=9645049aa8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3748 identity=12675 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wqcsq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9645049aa8 endpointID=3748 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-wqcsq subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=3bd033b3-0ff7-491c-b8bb-e502e3d7344f k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=3bd033b3-0ff7-491c-b8bb-e502e3d7344f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=9645049aa8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3748 identity=12675 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wqcsq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 aaa7abb0-78f6-40fd-84d3-8bf4544cb0f6 default }" containerID=21e0e29837d199362d599dfbd7785a2989d2dd71b2c4e140f41d79ef20928063 datapathConfiguration="&{false false false false false }" interface=lxc9fb6d589caca k8sPodName=openstack/ceph-object-controller-detect-version-9l2l5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21e0e29837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9l2l5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21e0e29837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=188235e0-5a74-43c1-b1fc-f87fd39099ae,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=188235e0-5a74-43c1-b1fc-f87fd39099ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9l2l5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=188235e0-5a74-43c1-b1fc-f87fd39099ae;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=188235e0-5a74-43c1-b1fc-f87fd39099ae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=21e0e29837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identity=54371 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=188235e0-5a74-43c1-b1fc-f87fd39099ae,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=188235e0-5a74-43c1-b1fc-f87fd39099ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9l2l5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21e0e29837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identity=54371 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9l2l5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=21e0e29837 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2604 identity=54371 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9l2l5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=21e0e29837 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2604 identity=54371 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9l2l5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=21e0e29837 endpointID=2604 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-9l2l5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=188235e0-5a74-43c1-b1fc-f87fd39099ae k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=188235e0-5a74-43c1-b1fc-f87fd39099ae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=21e0e29837 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2604 identity=54371 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9l2l5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 b50f485d-9fe7-4ce0-968f-8ad431d6bd00 default }" containerID=2fab88654c2a2303d1933f452ea785b59d5c223fc2323e871e38d6ab5f2d2e03 datapathConfiguration="&{false false false false false }" interface=lxca6242e9dbd87 k8sPodName=local-path-storage/helper-pod-create-pvc-33b82cb9-8a74-46d3-92d7-e1fa9f6626e1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fab88654c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33b82cb9-8a74-46d3-92d7-e1fa9f6626e1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fab88654c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33b82cb9-8a74-46d3-92d7-e1fa9f6626e1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fab88654c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=8353 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33b82cb9-8a74-46d3-92d7-e1fa9f6626e1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fab88654c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=8353 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33b82cb9-8a74-46d3-92d7-e1fa9f6626e1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fab88654c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=331 identity=8353 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33b82cb9-8a74-46d3-92d7-e1fa9f6626e1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fab88654c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=331 identity=8353 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33b82cb9-8a74-46d3-92d7-e1fa9f6626e1 subsys=daemon level=info msg="Delete endpoint request" containerID=2fab88654c endpointID=331 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-33b82cb9-8a74-46d3-92d7-e1fa9f6626e1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2fab88654c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=331 identity=8353 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33b82cb9-8a74-46d3-92d7-e1fa9f6626e1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 cafa59f1-d46e-48ac-a3cb-786214253f29 default }" containerID=8849f17e7cd7f37e8f370d870f043f3320baf2c7f4857bc01b32dd863a568c69 datapathConfiguration="&{false false false false false }" interface=lxccbd64652962b k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8849f17e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8849f17e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8849f17e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8849f17e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 identity=59724 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8849f17e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 identity=59724 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8849f17e7c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3670 identity=59724 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8849f17e7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3670 identity=59724 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.251 707d6d87-278b-45fc-8fb9-d79799a52285 default }" containerID=6f745cdf7fbee51614111c568b16ea21bd00c498c7d8d9f459fc486108c8fa07 datapathConfiguration="&{false false false false false }" interface=lxcd451f64fbdc0 k8sPodName=openstack/glance-db-init-brwb5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f745cdf7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-init-brwb5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f745cdf7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab934106-d443-4b2a-ac81-61a379264ef1,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ab934106-d443-4b2a-ac81-61a379264ef1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-init-brwb5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ab934106-d443-4b2a-ac81-61a379264ef1;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=ab934106-d443-4b2a-ac81-61a379264ef1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f745cdf7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identity=13488 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab934106-d443-4b2a-ac81-61a379264ef1,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ab934106-d443-4b2a-ac81-61a379264ef1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-init-brwb5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f745cdf7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identity=13488 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-init-brwb5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f745cdf7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=805 identity=13488 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-init-brwb5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f745cdf7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=805 identity=13488 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-init-brwb5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.57 3e2fb1bc-efe6-47ef-a297-8838409caf7b default }" containerID=9e3f735ca29427f74d395b861028da1cf1d5c9eff2a76e84605489cd5bd05a5a datapathConfiguration="&{false false false false false }" interface=lxc7dd2c8747e89 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dz4fd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e3f735ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dz4fd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e3f735ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dz4fd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9e3f735ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dz4fd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9e3f735ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=28454 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dz4fd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e3f735ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=28454 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dz4fd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 560cfb7b-43d3-4231-8448-57f5078c904e default }" containerID=62501614d3fbc4ecfd79d66f13f5fe41b11f59a592d46e99b33f9560873f2900 datapathConfiguration="&{false false false false false }" interface=lxc52b29d0f70fe k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cjggn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62501614d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cjggn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62501614d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cjggn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62501614d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 identity=6042 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cjggn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62501614d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 identity=6042 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cjggn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e3f735ca2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1322 identity=28454 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dz4fd subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e3f735ca2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1322 identity=28454 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dz4fd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=62501614d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3821 identity=6042 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cjggn subsys=endpoint level=info msg="Successful endpoint creation" containerID=62501614d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3821 identity=6042 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cjggn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f745cdf7f endpointID=805 k8sNamespace=openstack k8sPodName=glance-db-init-brwb5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ab934106-d443-4b2a-ac81-61a379264ef1 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=ab934106-d443-4b2a-ac81-61a379264ef1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6f745cdf7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=805 identity=13488 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-db-init-brwb5 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 c67646c4-ca11-4bc0-b4e7-a03c28a9d239 default }" containerID=98bfbc75b2b1adfa2dc44322422c48a214861dacaf53a580729cbf4631939108 datapathConfiguration="&{false false false false false }" interface=lxc5cfec5fbbba9 k8sPodName=openstack/glance-db-sync-8vqps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98bfbc75b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-db-sync-8vqps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98bfbc75b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3450f1e9-2fbb-42d6-b0c9-26109ed6c642,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=3450f1e9-2fbb-42d6-b0c9-26109ed6c642,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-db-sync-8vqps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=98bfbc75b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-db-sync-8vqps line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3450f1e9-2fbb-42d6-b0c9-26109ed6c642;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=3450f1e9-2fbb-42d6-b0c9-26109ed6c642;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98bfbc75b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identity=18189 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3450f1e9-2fbb-42d6-b0c9-26109ed6c642,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=3450f1e9-2fbb-42d6-b0c9-26109ed6c642,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-db-sync-8vqps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98bfbc75b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identity=18189 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-db-sync-8vqps subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98bfbc75b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=911 identity=18189 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-db-sync-8vqps subsys=endpoint level=info msg="Successful endpoint creation" containerID=98bfbc75b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=911 identity=18189 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-db-sync-8vqps subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=98bfbc75b2 endpointID=911 k8sNamespace=openstack k8sPodName=glance-db-sync-8vqps subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3450f1e9-2fbb-42d6-b0c9-26109ed6c642 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=3450f1e9-2fbb-42d6-b0c9-26109ed6c642 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=98bfbc75b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=911 identity=18189 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-db-sync-8vqps subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 5dcf2bd3-07fa-48d0-b8da-830d24fdf6ac default }" containerID=0a0924f1d51aa37d379a8088ed3f0698ff5ea5be3bfda57492667b119de40613 datapathConfiguration="&{false false false false false }" interface=lxc870c6a1d40aa k8sPodName=openstack/glance-rabbit-init-7kbpm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a0924f1d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2366 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-7kbpm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a0924f1d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2366 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ca777fc0-26a3-4c82-a1ce-b8a169572de7,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ca777fc0-26a3-4c82-a1ce-b8a169572de7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-7kbpm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0a0924f1d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2366 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-7kbpm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ca777fc0-26a3-4c82-a1ce-b8a169572de7;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ca777fc0-26a3-4c82-a1ce-b8a169572de7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a0924f1d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2366 identity=347 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ca777fc0-26a3-4c82-a1ce-b8a169572de7,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ca777fc0-26a3-4c82-a1ce-b8a169572de7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-7kbpm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a0924f1d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2366 identity=347 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-7kbpm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a0924f1d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2366 identity=347 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-7kbpm subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a0924f1d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2366 identity=347 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-7kbpm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0a0924f1d5 endpointID=2366 k8sNamespace=openstack k8sPodName=glance-rabbit-init-7kbpm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ca777fc0-26a3-4c82-a1ce-b8a169572de7 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ca777fc0-26a3-4c82-a1ce-b8a169572de7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0a0924f1d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2366 identity=347 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-7kbpm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 a8b37339-ff1e-4798-bc17-6f7c34d505be default }" containerID=b97e39f4f5e873f549fea73a62e7de6d345a8fe9e8fbfd2f4c7a6d6333dd03ec datapathConfiguration="&{false false false false false }" interface=lxcc4c16913da7f k8sPodName=openstack/glance-ks-service-6ntfr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b97e39f4f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3457 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-service-6ntfr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b97e39f4f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3457 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=af58669f-0ef2-4263-9968-afc129beb6b0,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=af58669f-0ef2-4263-9968-afc129beb6b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-service-6ntfr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=af58669f-0ef2-4263-9968-afc129beb6b0;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=af58669f-0ef2-4263-9968-afc129beb6b0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b97e39f4f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3457 identity=24554 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=af58669f-0ef2-4263-9968-afc129beb6b0,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=af58669f-0ef2-4263-9968-afc129beb6b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-service-6ntfr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b97e39f4f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3457 identity=24554 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-service-6ntfr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b97e39f4f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3457 identity=24554 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-service-6ntfr subsys=endpoint level=info msg="Successful endpoint creation" containerID=b97e39f4f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3457 identity=24554 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-service-6ntfr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b97e39f4f5 endpointID=3457 k8sNamespace=openstack k8sPodName=glance-ks-service-6ntfr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=af58669f-0ef2-4263-9968-afc129beb6b0 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=af58669f-0ef2-4263-9968-afc129beb6b0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b97e39f4f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3457 identity=24554 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-service-6ntfr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 896a08cc-e6c0-42c7-a5e8-787f21a6b80c default }" containerID=738d2c81106c1f054863f3f8463b8f8e70e535e93b29d6ac9fb951a685f0d75f datapathConfiguration="&{false false false false false }" interface=lxceff1c219d676 k8sPodName=openstack/glance-ks-endpoints-cjjg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=738d2c8110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3828 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-endpoints-cjjg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=738d2c8110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3828 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6c2ccef4-1d4c-444e-8701-8cb483b97b3c,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6c2ccef4-1d4c-444e-8701-8cb483b97b3c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-endpoints-cjjg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=738d2c8110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3828 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-endpoints-cjjg2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6c2ccef4-1d4c-444e-8701-8cb483b97b3c;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6c2ccef4-1d4c-444e-8701-8cb483b97b3c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=738d2c8110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3828 identity=6284 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6c2ccef4-1d4c-444e-8701-8cb483b97b3c,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6c2ccef4-1d4c-444e-8701-8cb483b97b3c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-endpoints-cjjg2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=738d2c8110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3828 identity=6284 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-endpoints-cjjg2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=738d2c8110 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3828 identity=6284 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-endpoints-cjjg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=738d2c8110 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3828 identity=6284 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-endpoints-cjjg2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=738d2c8110 endpointID=3828 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-cjjg2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6c2ccef4-1d4c-444e-8701-8cb483b97b3c k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6c2ccef4-1d4c-444e-8701-8cb483b97b3c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=738d2c8110 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3828 identity=6284 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-endpoints-cjjg2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 db0c6ef6-5c83-4642-9a78-9447b6324d0a default }" containerID=8d1fcec81adb454993b2b14dc3733db081fae865c2cb646814a7fa02af880086 datapathConfiguration="&{false false false false false }" interface=lxc4c8d5ab6c654 k8sPodName=openstack/glance-ks-user-bw26r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d1fcec81a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-ks-user-bw26r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d1fcec81a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f346947b-dc0d-4014-9138-ce48ea5b6e2d,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f346947b-dc0d-4014-9138-ce48ea5b6e2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-ks-user-bw26r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f346947b-dc0d-4014-9138-ce48ea5b6e2d;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=f346947b-dc0d-4014-9138-ce48ea5b6e2d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d1fcec81a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identity=28873 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f346947b-dc0d-4014-9138-ce48ea5b6e2d,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f346947b-dc0d-4014-9138-ce48ea5b6e2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-ks-user-bw26r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d1fcec81a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identity=28873 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-ks-user-bw26r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8d1fcec81a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1339 identity=28873 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-ks-user-bw26r subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d1fcec81a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1339 identity=28873 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-ks-user-bw26r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d1fcec81a endpointID=1339 k8sNamespace=openstack k8sPodName=glance-ks-user-bw26r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f346947b-dc0d-4014-9138-ce48ea5b6e2d k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=f346947b-dc0d-4014-9138-ce48ea5b6e2d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8d1fcec81a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1339 identity=28873 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-ks-user-bw26r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 9c950356-b564-4c9b-9454-13268ce66997 default }" containerID=9859633986a884b357b2d4d320e05e43ae5b69add793f4b6f082c13c887710a4 datapathConfiguration="&{false false false false false }" interface=lxc208df6cbc613 k8sPodName=openstack/glance-metadefs-load-bgf4c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9859633986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-bgf4c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9859633986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=47f9b902-a9a0-4788-8a94-6f8724d10212,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=47f9b902-a9a0-4788-8a94-6f8724d10212,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-bgf4c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=47f9b902-a9a0-4788-8a94-6f8724d10212;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=47f9b902-a9a0-4788-8a94-6f8724d10212;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9859633986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=19723 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=47f9b902-a9a0-4788-8a94-6f8724d10212,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=47f9b902-a9a0-4788-8a94-6f8724d10212,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-bgf4c oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9859633986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=19723 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-bgf4c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9859633986 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=506 identity=19723 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-bgf4c subsys=endpoint level=info msg="Successful endpoint creation" containerID=9859633986 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=506 identity=19723 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-bgf4c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9859633986 endpointID=506 k8sNamespace=openstack k8sPodName=glance-metadefs-load-bgf4c subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=47f9b902-a9a0-4788-8a94-6f8724d10212 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=47f9b902-a9a0-4788-8a94-6f8724d10212 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9859633986 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=506 identity=19723 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-bgf4c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 214c755d-ef86-44df-9959-bd861568d9e6 default }" containerID=ee2108bb4e8bc41da5efe1538104aae4721b0bfae215c02252d0efb82fd6aa5c datapathConfiguration="&{false false false false false }" interface=lxc71d6f8e2c8aa k8sPodName=openstack/glance-storage-init-29p7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee2108bb4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-storage-init-29p7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee2108bb4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=008cf694-8325-4f2e-81ab-09d429361f88,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=008cf694-8325-4f2e-81ab-09d429361f88,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-storage-init-29p7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=008cf694-8325-4f2e-81ab-09d429361f88;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=008cf694-8325-4f2e-81ab-09d429361f88;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee2108bb4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 identity=436 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=008cf694-8325-4f2e-81ab-09d429361f88,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=008cf694-8325-4f2e-81ab-09d429361f88,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-storage-init-29p7t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee2108bb4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 identity=436 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-storage-init-29p7t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee2108bb4e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1271 identity=436 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-storage-init-29p7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee2108bb4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1271 identity=436 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-storage-init-29p7t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee2108bb4e endpointID=1271 k8sNamespace=openstack k8sPodName=glance-storage-init-29p7t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=008cf694-8325-4f2e-81ab-09d429361f88 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=008cf694-8325-4f2e-81ab-09d429361f88 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ee2108bb4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1271 identity=436 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-storage-init-29p7t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 0b753ac9-c3a6-416b-8dee-4e89f8a72e4c default }" containerID=971cfe3ab3620389b867f290824bfdab48019245b0128c5cd8984cc0de902384 datapathConfiguration="&{false false false false false }" interface=lxc95688b9d52c5 k8sPodName=openstack/glance-api-6d7d77bbc6-hs8bn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=971cfe3ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3371 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-6d7d77bbc6-hs8bn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=971cfe3ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3371 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-6d7d77bbc6-hs8bn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=971cfe3ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3371 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-6d7d77bbc6-hs8bn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=971cfe3ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3371 identity=22784 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-6d7d77bbc6-hs8bn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=971cfe3ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3371 identity=22784 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-6d7d77bbc6-hs8bn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=971cfe3ab3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3371 identity=22784 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-6d7d77bbc6-hs8bn subsys=endpoint level=info msg="Successful endpoint creation" containerID=971cfe3ab3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3371 identity=22784 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-6d7d77bbc6-hs8bn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 b9750e5b-44b2-43e9-8062-664c84786af7 default }" containerID=da52582a4891a54ea76ba85da33a041c04d1deffdc2442872d48170bf68caa4a datapathConfiguration="&{false false false false false }" interface=lxcb51d2497d537 k8sPodName=openstack/staffeln-conductor-6759c46c56-x5t6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da52582a48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-conductor-6759c46c56-x5t6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da52582a48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-conductor-6759c46c56-x5t6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=da52582a48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-conductor-6759c46c56-x5t6q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da52582a48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identity=2382 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-conductor-6759c46c56-x5t6q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da52582a48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identity=2382 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-conductor-6759c46c56-x5t6q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 7876de61-e6aa-4d4b-85eb-4851baadda63 default }" containerID=0e1f8e6a6b7c927054bc8faa783165bcbb0a3a8e87defadb2c2fc5cc8278cf77 datapathConfiguration="&{false false false false false }" interface=lxcbce539bb8428 k8sPodName=openstack/staffeln-api-58c8894475-2s96l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e1f8e6a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3591 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-api-58c8894475-2s96l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e1f8e6a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3591 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-api-58c8894475-2s96l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e1f8e6a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3591 identity=12963 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-api-58c8894475-2s96l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e1f8e6a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3591 identity=12963 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-api-58c8894475-2s96l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da52582a48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=485 identity=2382 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-conductor-6759c46c56-x5t6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=da52582a48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=485 identity=2382 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-conductor-6759c46c56-x5t6q subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.125 2b34bd2d-53f0-4832-bd73-0b55912b6a16 default }" containerID=d93b352f628966268e6e8a1a5d2c1d8590e78c9a1dedbaf82ea0f58c9710be03 datapathConfiguration="&{false false false false false }" interface=lxc7d3c64f51f5e k8sPodName=openstack/staffeln-db-init-s6tss labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d93b352f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2243 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/staffeln-db-init-s6tss subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d93b352f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2243 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d8924f4c-2b14-49e2-ba87-ec8579fbc7df,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=d8924f4c-2b14-49e2-ba87-ec8579fbc7df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/staffeln-db-init-s6tss subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=d8924f4c-2b14-49e2-ba87-ec8579fbc7df;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=d8924f4c-2b14-49e2-ba87-ec8579fbc7df;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d93b352f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2243 identity=34508 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d8924f4c-2b14-49e2-ba87-ec8579fbc7df,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=d8924f4c-2b14-49e2-ba87-ec8579fbc7df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/staffeln-db-init-s6tss oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d93b352f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2243 identity=34508 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/staffeln-db-init-s6tss subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e1f8e6a6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3591 identity=12963 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-api-58c8894475-2s96l subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e1f8e6a6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3591 identity=12963 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-api-58c8894475-2s96l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d93b352f62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2243 identity=34508 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/staffeln-db-init-s6tss subsys=endpoint level=info msg="Successful endpoint creation" containerID=d93b352f62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2243 identity=34508 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/staffeln-db-init-s6tss subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d93b352f62 endpointID=2243 k8sNamespace=openstack k8sPodName=staffeln-db-init-s6tss subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=d8924f4c-2b14-49e2-ba87-ec8579fbc7df k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=d8924f4c-2b14-49e2-ba87-ec8579fbc7df k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=d93b352f62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2243 identity=34508 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/staffeln-db-init-s6tss subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 bf9bf9ab-12a9-4bb9-a294-f225fe6e69b2 default }" containerID=8b0a62d1eaeb6ea4c09748e8191802453c682786fc92b1125480b428bb698b67 datapathConfiguration="&{false false false false false }" interface=lxcbb30d0885d31 k8sPodName=openstack/staffeln-db-sync-vskms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b0a62d1ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1762 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-db-sync-vskms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b0a62d1ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1762 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6956b117-113d-4a71-bc82-381c0ae2a620,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=6956b117-113d-4a71-bc82-381c0ae2a620,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-db-sync-vskms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8b0a62d1ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1762 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-db-sync-vskms line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=6956b117-113d-4a71-bc82-381c0ae2a620;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=6956b117-113d-4a71-bc82-381c0ae2a620;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b0a62d1ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1762 identity=1706 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6956b117-113d-4a71-bc82-381c0ae2a620,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=6956b117-113d-4a71-bc82-381c0ae2a620,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-db-sync-vskms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b0a62d1ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1762 identity=1706 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-db-sync-vskms subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b0a62d1ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1762 identity=1706 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-db-sync-vskms subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b0a62d1ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1762 identity=1706 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-db-sync-vskms subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8b0a62d1ea endpointID=1762 k8sNamespace=openstack k8sPodName=staffeln-db-sync-vskms subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=6956b117-113d-4a71-bc82-381c0ae2a620 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=6956b117-113d-4a71-bc82-381c0ae2a620 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=8b0a62d1ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1762 identity=1706 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-db-sync-vskms subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 56fed989-4171-4bfc-8d3b-b058ea617afc default }" containerID=b092eb9fde5b3ecf67024cf3664f195fcca25cd4f2032dbbe7edd5ab9d591c7f datapathConfiguration="&{false false false false false }" interface=lxc31a052e0759c k8sPodName=local-path-storage/helper-pod-create-pvc-e14eb4c7-2723-44e0-ba2c-c8edd4c2df58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b092eb9fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1558 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e14eb4c7-2723-44e0-ba2c-c8edd4c2df58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b092eb9fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1558 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e14eb4c7-2723-44e0-ba2c-c8edd4c2df58 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b092eb9fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1558 identity=8353 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e14eb4c7-2723-44e0-ba2c-c8edd4c2df58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b092eb9fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1558 identity=8353 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e14eb4c7-2723-44e0-ba2c-c8edd4c2df58 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b092eb9fde datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1558 identity=8353 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e14eb4c7-2723-44e0-ba2c-c8edd4c2df58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b092eb9fde datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1558 identity=8353 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e14eb4c7-2723-44e0-ba2c-c8edd4c2df58 subsys=daemon level=info msg="Delete endpoint request" containerID=b092eb9fde endpointID=1558 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e14eb4c7-2723-44e0-ba2c-c8edd4c2df58 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b092eb9fde datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1558 identity=8353 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e14eb4c7-2723-44e0-ba2c-c8edd4c2df58 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 81866590-64ff-4d5d-ac83-edcd272f7b4c default }" containerID=cf5fca8fc45100205da5723c0bac73fbf1482233cb2732fe58d08b1bf1cadfb1 datapathConfiguration="&{false false false false false }" interface=lxc445d9e3a4e81 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf5fca8fc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf5fca8fc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cf5fca8fc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf5fca8fc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 identity=12509 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf5fca8fc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 identity=12509 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf5fca8fc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3932 identity=12509 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf5fca8fc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3932 identity=12509 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.91 c3340e71-4fd4-4d7a-b78f-65e32221116a default }" containerID=e35a79ce1b0ced8952227ce016a83e47e7a654c003b3d4c40ec982d33a4b2511 datapathConfiguration="&{false false false false false }" interface=lxcda75d535839e k8sPodName=openstack/cinder-api-b964f7b54-p4q4p labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.20 49861010-c3dd-4ae1-bf2e-d2e6ecd1dab8 default }" containerID=42955b297ba80d02fe2bfec54f8290c09e248d9fe38b0883ed4d66132fc8466c datapathConfiguration="&{false false false false false }" interface=lxc24e249d9863a k8sPodName=openstack/cinder-scheduler-c5d864746-dl6bn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e35a79ce1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-api-b964f7b54-p4q4p subsys=endpoint level=info msg="New endpoint" containerID=42955b297b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-scheduler-c5d864746-dl6bn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e35a79ce1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-api-b964f7b54-p4q4p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=42955b297b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-scheduler-c5d864746-dl6bn subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e35a79ce1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identity=6001 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-api-b964f7b54-p4q4p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e35a79ce1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identity=6001 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-api-b964f7b54-p4q4p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=42955b297b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-scheduler-c5d864746-dl6bn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42955b297b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identity=15649 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-scheduler-c5d864746-dl6bn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42955b297b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identity=15649 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-scheduler-c5d864746-dl6bn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 6843c6eb-9e6d-4cc2-a4c0-0dcd090e07eb default }" containerID=8cc4b1f1bd6ab91d47b917f6e6e183b0d8791219ec0d841f69710174bd752ad5 datapathConfiguration="&{false false false false false }" interface=lxc773302d31261 k8sPodName=openstack/cinder-db-init-kdcwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cc4b1f1bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-init-kdcwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cc4b1f1bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e32b8d28-f68e-413e-a62a-41041b8b153b,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=e32b8d28-f68e-413e-a62a-41041b8b153b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-init-kdcwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e32b8d28-f68e-413e-a62a-41041b8b153b;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=e32b8d28-f68e-413e-a62a-41041b8b153b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8cc4b1f1bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identity=23431 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e32b8d28-f68e-413e-a62a-41041b8b153b,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=e32b8d28-f68e-413e-a62a-41041b8b153b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-init-kdcwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cc4b1f1bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identity=23431 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-init-kdcwp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e35a79ce1b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3739 identity=6001 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-api-b964f7b54-p4q4p subsys=endpoint level=info msg="Successful endpoint creation" containerID=e35a79ce1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3739 identity=6001 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-api-b964f7b54-p4q4p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8cc4b1f1bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=644 identity=23431 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-init-kdcwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cc4b1f1bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=644 identity=23431 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-init-kdcwp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=42955b297b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3855 identity=15649 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-scheduler-c5d864746-dl6bn subsys=endpoint level=info msg="Successful endpoint creation" containerID=42955b297b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3855 identity=15649 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-scheduler-c5d864746-dl6bn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8cc4b1f1bd endpointID=644 k8sNamespace=openstack k8sPodName=cinder-db-init-kdcwp subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e32b8d28-f68e-413e-a62a-41041b8b153b k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=e32b8d28-f68e-413e-a62a-41041b8b153b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8cc4b1f1bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=644 identity=23431 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-init-kdcwp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 7d3f317a-c52e-4811-8b42-e5539d489641 default }" containerID=ae8ef0195012f00cd0a219032b2d21b8a1d0d3d5e04f803540b1819c55d8b8a0 datapathConfiguration="&{false false false false false }" interface=lxcb62d64926c77 k8sPodName=openstack/cinder-db-sync-f6mb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae8ef01950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2509 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/cinder-db-sync-f6mb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae8ef01950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2509 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d364229d-70eb-48a8-aa6b-87b29b752850,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=d364229d-70eb-48a8-aa6b-87b29b752850,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/cinder-db-sync-f6mb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d364229d-70eb-48a8-aa6b-87b29b752850;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=d364229d-70eb-48a8-aa6b-87b29b752850;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae8ef01950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2509 identity=47571 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d364229d-70eb-48a8-aa6b-87b29b752850,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=d364229d-70eb-48a8-aa6b-87b29b752850,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/cinder-db-sync-f6mb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae8ef01950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2509 identity=47571 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/cinder-db-sync-f6mb9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ae8ef01950 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2509 identity=47571 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/cinder-db-sync-f6mb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae8ef01950 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2509 identity=47571 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/cinder-db-sync-f6mb9 subsys=daemon level=info msg="Delete endpoint request" containerID=ae8ef01950 endpointID=2509 k8sNamespace=openstack k8sPodName=cinder-db-sync-f6mb9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d364229d-70eb-48a8-aa6b-87b29b752850 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=d364229d-70eb-48a8-aa6b-87b29b752850 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=ae8ef01950 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2509 identity=47571 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/cinder-db-sync-f6mb9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 e7957704-c74b-4701-a6af-0aa758609b17 default }" containerID=9aa197c5ae5c35e6f23cd5edd0fa266a17f59731414e90a387215986665787d3 datapathConfiguration="&{false false false false false }" interface=lxcd5c3b68df8e9 k8sPodName=openstack/cinder-rabbit-init-9754x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9aa197c5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-rabbit-init-9754x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9aa197c5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1dd21559-6fbb-44a3-b1da-6427cf99794b,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1dd21559-6fbb-44a3-b1da-6427cf99794b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-rabbit-init-9754x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1dd21559-6fbb-44a3-b1da-6427cf99794b;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1dd21559-6fbb-44a3-b1da-6427cf99794b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9aa197c5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=13588 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1dd21559-6fbb-44a3-b1da-6427cf99794b,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1dd21559-6fbb-44a3-b1da-6427cf99794b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-rabbit-init-9754x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9aa197c5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=13588 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-rabbit-init-9754x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9aa197c5ae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1103 identity=13588 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-rabbit-init-9754x subsys=endpoint level=info msg="Successful endpoint creation" containerID=9aa197c5ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1103 identity=13588 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-rabbit-init-9754x subsys=daemon level=info msg="Delete endpoint request" containerID=9aa197c5ae endpointID=1103 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-9754x subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1dd21559-6fbb-44a3-b1da-6427cf99794b k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1dd21559-6fbb-44a3-b1da-6427cf99794b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9aa197c5ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1103 identity=13588 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-rabbit-init-9754x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 e0ce211a-d3d6-4065-9e9a-aa7a5f5057fd default }" containerID=2328d358eb1217dd170a3e15b477463cd1289fdb079dbeace28a3444029ec80c datapathConfiguration="&{false false false false false }" interface=lxcafe6bc886977 k8sPodName=openstack/cinder-ks-service-jr5wz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2328d358eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/cinder-ks-service-jr5wz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2328d358eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f68339f9-27bb-4f40-9d88-22c0553e66f0,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=f68339f9-27bb-4f40-9d88-22c0553e66f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/cinder-ks-service-jr5wz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=f68339f9-27bb-4f40-9d88-22c0553e66f0;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=f68339f9-27bb-4f40-9d88-22c0553e66f0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2328d358eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=12865 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f68339f9-27bb-4f40-9d88-22c0553e66f0,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=f68339f9-27bb-4f40-9d88-22c0553e66f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/cinder-ks-service-jr5wz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2328d358eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=12865 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/cinder-ks-service-jr5wz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2328d358eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=297 identity=12865 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/cinder-ks-service-jr5wz subsys=endpoint level=info msg="Successful endpoint creation" containerID=2328d358eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=297 identity=12865 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/cinder-ks-service-jr5wz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2328d358eb endpointID=297 k8sNamespace=openstack k8sPodName=cinder-ks-service-jr5wz subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=f68339f9-27bb-4f40-9d88-22c0553e66f0 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=f68339f9-27bb-4f40-9d88-22c0553e66f0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=2328d358eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=297 identity=12865 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/cinder-ks-service-jr5wz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 12b5ba16-5536-4bb4-aa82-65e638e79fef default }" containerID=95b2471c3c15a04e644b4063e7db6506ad6d5e40d4b9e939caca4c2d4492e4e7 datapathConfiguration="&{false false false false false }" interface=lxc30baafdd7170 k8sPodName=openstack/cinder-ks-endpoints-nvfrw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95b2471c3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-ks-endpoints-nvfrw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95b2471c3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d2eaee4f-0883-4ead-9f22-66ed449456aa,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d2eaee4f-0883-4ead-9f22-66ed449456aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-ks-endpoints-nvfrw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=95b2471c3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-ks-endpoints-nvfrw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d2eaee4f-0883-4ead-9f22-66ed449456aa;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=d2eaee4f-0883-4ead-9f22-66ed449456aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95b2471c3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=23969 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d2eaee4f-0883-4ead-9f22-66ed449456aa,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d2eaee4f-0883-4ead-9f22-66ed449456aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-ks-endpoints-nvfrw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95b2471c3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=23969 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-ks-endpoints-nvfrw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=95b2471c3c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=866 identity=23969 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-ks-endpoints-nvfrw subsys=endpoint level=info msg="Successful endpoint creation" containerID=95b2471c3c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=866 identity=23969 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-ks-endpoints-nvfrw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=95b2471c3c endpointID=866 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-nvfrw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d2eaee4f-0883-4ead-9f22-66ed449456aa k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=d2eaee4f-0883-4ead-9f22-66ed449456aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=95b2471c3c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=866 identity=23969 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/cinder-ks-endpoints-nvfrw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 18904740-8b5a-4767-b644-3d7dbbbe00b1 default }" containerID=cc408eeeaefd7198078abd98a9e457af2bf951681e92731f798e26bca6b5b1f8 datapathConfiguration="&{false false false false false }" interface=lxc8fac573aac7b k8sPodName=openstack/cinder-ks-user-2ntff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc408eeeae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/cinder-ks-user-2ntff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc408eeeae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2d2e7b79-b0db-4c5b-8234-b297e02b23d4,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=2d2e7b79-b0db-4c5b-8234-b297e02b23d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/cinder-ks-user-2ntff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=2d2e7b79-b0db-4c5b-8234-b297e02b23d4;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=2d2e7b79-b0db-4c5b-8234-b297e02b23d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc408eeeae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 identity=11065 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2d2e7b79-b0db-4c5b-8234-b297e02b23d4,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=2d2e7b79-b0db-4c5b-8234-b297e02b23d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/cinder-ks-user-2ntff oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cc408eeeae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 identity=11065 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/cinder-ks-user-2ntff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc408eeeae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2783 identity=11065 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/cinder-ks-user-2ntff subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc408eeeae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2783 identity=11065 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/cinder-ks-user-2ntff subsys=daemon level=info msg="Delete endpoint request" containerID=cc408eeeae endpointID=2783 k8sNamespace=openstack k8sPodName=cinder-ks-user-2ntff subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=2d2e7b79-b0db-4c5b-8234-b297e02b23d4 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=2d2e7b79-b0db-4c5b-8234-b297e02b23d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=cc408eeeae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2783 identity=11065 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/cinder-ks-user-2ntff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 e9e16cd4-0a18-43c8-b254-b6eab6cb3b89 default }" containerID=9770c6b0722d310205b39ce38327ac29c6bbe47bf82a20a8ec01e3359d46332e datapathConfiguration="&{false false false false false }" interface=lxcc6746744c14c k8sPodName=openstack/cinder-backup-storage-init-gzs5l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9770c6b072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-backup-storage-init-gzs5l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9770c6b072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8fb60873-3d3f-4548-bd76-9e8089c29e25,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=8fb60873-3d3f-4548-bd76-9e8089c29e25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-backup-storage-init-gzs5l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8fb60873-3d3f-4548-bd76-9e8089c29e25;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=8fb60873-3d3f-4548-bd76-9e8089c29e25;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9770c6b072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identity=3461 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8fb60873-3d3f-4548-bd76-9e8089c29e25,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=8fb60873-3d3f-4548-bd76-9e8089c29e25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-backup-storage-init-gzs5l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9770c6b072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identity=3461 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-backup-storage-init-gzs5l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9770c6b072 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=854 identity=3461 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-backup-storage-init-gzs5l subsys=endpoint level=info msg="Successful endpoint creation" containerID=9770c6b072 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=854 identity=3461 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-backup-storage-init-gzs5l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9770c6b072 endpointID=854 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-gzs5l subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8fb60873-3d3f-4548-bd76-9e8089c29e25 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=8fb60873-3d3f-4548-bd76-9e8089c29e25 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9770c6b072 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=854 identity=3461 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-backup-storage-init-gzs5l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 c99db51f-bd32-4568-82e5-8cbc500d013d default }" containerID=525761bf05f43ddddf7ca14f6b59cb9ffc5219c261effec01447279634559557 datapathConfiguration="&{false false false false false }" interface=lxca4579eb93670 k8sPodName=openstack/cinder-create-internal-tenant-wlhsp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=525761bf05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wlhsp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=525761bf05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=50c2467c-f882-4018-8475-fc9670eafbd0,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=50c2467c-f882-4018-8475-fc9670eafbd0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wlhsp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=50c2467c-f882-4018-8475-fc9670eafbd0;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=50c2467c-f882-4018-8475-fc9670eafbd0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=525761bf05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identity=32129 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=50c2467c-f882-4018-8475-fc9670eafbd0,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=50c2467c-f882-4018-8475-fc9670eafbd0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wlhsp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=525761bf05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identity=32129 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wlhsp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=525761bf05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1625 identity=32129 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wlhsp subsys=endpoint level=info msg="Successful endpoint creation" containerID=525761bf05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1625 identity=32129 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wlhsp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=525761bf05 endpointID=1625 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-wlhsp subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=50c2467c-f882-4018-8475-fc9670eafbd0 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=50c2467c-f882-4018-8475-fc9670eafbd0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=525761bf05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1625 identity=32129 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wlhsp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 de28bdee-e6ce-4d98-bdda-5f93bc2ffcaf default }" containerID=6385c0536111aa644dc035599fbeb8fae82e931e2816fb5333f3a487392e42d0 datapathConfiguration="&{false false false false false }" interface=lxc69198ef33018 k8sPodName=openstack/cinder-storage-init-ff6lm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6385c05361 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2317 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-storage-init-ff6lm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6385c05361 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2317 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ac1a5ab3-3dfa-4224-bdf2-a43ff722cd67,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=ac1a5ab3-3dfa-4224-bdf2-a43ff722cd67,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-storage-init-ff6lm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ac1a5ab3-3dfa-4224-bdf2-a43ff722cd67;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=ac1a5ab3-3dfa-4224-bdf2-a43ff722cd67;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6385c05361 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2317 identity=46297 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ac1a5ab3-3dfa-4224-bdf2-a43ff722cd67,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=ac1a5ab3-3dfa-4224-bdf2-a43ff722cd67,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-storage-init-ff6lm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6385c05361 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2317 identity=46297 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-storage-init-ff6lm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6385c05361 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2317 identity=46297 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-storage-init-ff6lm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6385c05361 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2317 identity=46297 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-storage-init-ff6lm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6385c05361 endpointID=2317 k8sNamespace=openstack k8sPodName=cinder-storage-init-ff6lm subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ac1a5ab3-3dfa-4224-bdf2-a43ff722cd67 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=ac1a5ab3-3dfa-4224-bdf2-a43ff722cd67 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=6385c05361 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2317 identity=46297 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/cinder-storage-init-ff6lm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 4402e9ec-45d7-4ab9-b7e4-9e8f07b5aa67 default }" containerID=bfb74bc62508012b6cb125f7f2350c478aa65a7f74a958fd1380c28ca7b4daf5 datapathConfiguration="&{false false false false false }" interface=lxc253115811fb9 k8sPodName=openstack/cinder-bootstrap-9thp9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfb74bc625 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-bootstrap-9thp9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfb74bc625 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c4e92702-0a66-4fb0-a3d5-7f914015ae58,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c4e92702-0a66-4fb0-a3d5-7f914015ae58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-bootstrap-9thp9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c4e92702-0a66-4fb0-a3d5-7f914015ae58;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=c4e92702-0a66-4fb0-a3d5-7f914015ae58;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfb74bc625 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=7636 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c4e92702-0a66-4fb0-a3d5-7f914015ae58,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c4e92702-0a66-4fb0-a3d5-7f914015ae58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-bootstrap-9thp9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfb74bc625 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=7636 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-bootstrap-9thp9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfb74bc625 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=45 identity=7636 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-bootstrap-9thp9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfb74bc625 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=7636 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-bootstrap-9thp9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 f57b0b60-78b7-4171-a5c2-ab1c38132eef default }" containerID=c77a1943e54b1480f1f5ed1846db4d9cff65894f0d46deb40d67272dff9c004d datapathConfiguration="&{false false false false false }" interface=lxc743aeae8cb1f k8sPodName=openstack/cinder-backup-6f587fb68d-f8bjq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c77a1943e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-backup-6f587fb68d-f8bjq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c77a1943e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-backup-6f587fb68d-f8bjq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c77a1943e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=39937 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-backup-6f587fb68d-f8bjq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c77a1943e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=39937 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-backup-6f587fb68d-f8bjq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 00fdb29d-15e7-42be-8a4d-6efac6c5c3a2 default }" containerID=8d83fe8311da54c4e762f3d5426e8325c4e6416ec7680b01fb920448a6707f8e datapathConfiguration="&{false false false false false }" interface=lxc1c2ef9867d0f k8sPodName=openstack/cinder-volume-868c84c8b6-hwh48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d83fe8311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1219 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-volume-868c84c8b6-hwh48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d83fe8311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1219 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-volume-868c84c8b6-hwh48 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d83fe8311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1219 identity=23801 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-volume-868c84c8b6-hwh48 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d83fe8311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1219 identity=23801 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-volume-868c84c8b6-hwh48 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c77a1943e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=60 identity=39937 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-backup-6f587fb68d-f8bjq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c77a1943e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=60 identity=39937 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/cinder-backup-6f587fb68d-f8bjq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8d83fe8311 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1219 identity=23801 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-volume-868c84c8b6-hwh48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d83fe8311 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1219 identity=23801 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-volume-868c84c8b6-hwh48 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bfb74bc625 endpointID=45 k8sNamespace=openstack k8sPodName=cinder-bootstrap-9thp9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c4e92702-0a66-4fb0-a3d5-7f914015ae58 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=c4e92702-0a66-4fb0-a3d5-7f914015ae58 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=bfb74bc625 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=7636 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-bootstrap-9thp9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 e9660400-2b92-491c-a730-10c3483a0f6e default }" containerID=bde7d97da2cd6c0fa0ba5e58c400b9ca1c84a2d968eddc21dd9bbff9ead13015 datapathConfiguration="&{false false false false false }" interface=lxc4a1d6ca5b5a1 k8sPodName=openstack/placement-api-7c79bbf4dc-dd99m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bde7d97da2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/placement-api-7c79bbf4dc-dd99m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bde7d97da2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/placement-api-7c79bbf4dc-dd99m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bde7d97da2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=12395 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/placement-api-7c79bbf4dc-dd99m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bde7d97da2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=12395 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/placement-api-7c79bbf4dc-dd99m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.97 772f458d-1cfd-4318-8855-2dd7fee5221e default }" containerID=e00beac25921e6c6f5c3a5b1749e5a92c541cd343585c2ed182b03756ae7734c datapathConfiguration="&{false false false false false }" interface=lxc9871bc79dbe9 k8sPodName=openstack/placement-db-init-mwxqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e00beac259 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-db-init-mwxqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e00beac259 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c234a5cf-414e-4c85-97e7-f91149c71473,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=c234a5cf-414e-4c85-97e7-f91149c71473,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-db-init-mwxqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=c234a5cf-414e-4c85-97e7-f91149c71473;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=c234a5cf-414e-4c85-97e7-f91149c71473;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e00beac259 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=21439 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c234a5cf-414e-4c85-97e7-f91149c71473,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=c234a5cf-414e-4c85-97e7-f91149c71473,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-db-init-mwxqk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e00beac259 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=21439 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-db-init-mwxqk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bde7d97da2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1472 identity=12395 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/placement-api-7c79bbf4dc-dd99m subsys=endpoint level=info msg="Successful endpoint creation" containerID=bde7d97da2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1472 identity=12395 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/placement-api-7c79bbf4dc-dd99m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e00beac259 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=227 identity=21439 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-db-init-mwxqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e00beac259 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=227 identity=21439 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-db-init-mwxqk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e00beac259 endpointID=227 k8sNamespace=openstack k8sPodName=placement-db-init-mwxqk subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=c234a5cf-414e-4c85-97e7-f91149c71473 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=c234a5cf-414e-4c85-97e7-f91149c71473 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=e00beac259 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=227 identity=21439 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/placement-db-init-mwxqk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 135b2ed5-cf72-4c3f-971c-bea7deb210d0 default }" containerID=a1c9af668f3c5f0a7fe46f307962c43b9260daa70cb89b76ffa257bf2d6e9701 datapathConfiguration="&{false false false false false }" interface=lxc8537a0c82fc0 k8sPodName=openstack/placement-db-sync-qhjqg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1c9af668f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2066 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-sync-qhjqg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1c9af668f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2066 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=588258ad-d0ea-45be-a3d2-3ccae56b98db,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=588258ad-d0ea-45be-a3d2-3ccae56b98db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-sync-qhjqg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a1c9af668f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2066 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-sync-qhjqg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=588258ad-d0ea-45be-a3d2-3ccae56b98db;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=588258ad-d0ea-45be-a3d2-3ccae56b98db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1c9af668f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2066 identity=37507 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=588258ad-d0ea-45be-a3d2-3ccae56b98db,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=588258ad-d0ea-45be-a3d2-3ccae56b98db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-sync-qhjqg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1c9af668f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2066 identity=37507 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-sync-qhjqg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1c9af668f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2066 identity=37507 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-sync-qhjqg subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1c9af668f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2066 identity=37507 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-sync-qhjqg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a1c9af668f endpointID=2066 k8sNamespace=openstack k8sPodName=placement-db-sync-qhjqg subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=588258ad-d0ea-45be-a3d2-3ccae56b98db k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=588258ad-d0ea-45be-a3d2-3ccae56b98db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=a1c9af668f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2066 identity=37507 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/placement-db-sync-qhjqg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 b9c47108-9e7d-445d-8dd3-0409b48b5984 default }" containerID=e134334a31bcc9f38ca55d5b728e53f0c1573d4ff17914ae63e8406e358c1d6d datapathConfiguration="&{false false false false false }" interface=lxc1c085dff149f k8sPodName=openstack/placement-ks-service-zjwmb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e134334a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/placement-ks-service-zjwmb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e134334a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=6fb02b5a-261f-45bd-8610-0199b859d5ad,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=6fb02b5a-261f-45bd-8610-0199b859d5ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/placement-ks-service-zjwmb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e134334a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.132 ipv6= k8sPodName=openstack/placement-ks-service-zjwmb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=6fb02b5a-261f-45bd-8610-0199b859d5ad;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=6fb02b5a-261f-45bd-8610-0199b859d5ad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e134334a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 identity=6026 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=6fb02b5a-261f-45bd-8610-0199b859d5ad,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=6fb02b5a-261f-45bd-8610-0199b859d5ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/placement-ks-service-zjwmb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e134334a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 identity=6026 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/placement-ks-service-zjwmb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e134334a31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3489 identity=6026 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/placement-ks-service-zjwmb subsys=endpoint level=info msg="Successful endpoint creation" containerID=e134334a31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3489 identity=6026 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/placement-ks-service-zjwmb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e134334a31 endpointID=3489 k8sNamespace=openstack k8sPodName=placement-ks-service-zjwmb subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=6fb02b5a-261f-45bd-8610-0199b859d5ad k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=6fb02b5a-261f-45bd-8610-0199b859d5ad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=e134334a31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3489 identity=6026 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/placement-ks-service-zjwmb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 b7283a48-71bd-41e6-a621-cee907a37445 default }" containerID=4fe990ed0d6838a9a11819681e310923a9168d3491a65e8ca9dbdbe7ffd68a2f datapathConfiguration="&{false false false false false }" interface=lxc317bd3185aad k8sPodName=openstack/placement-ks-user-4v5k2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fe990ed0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/placement-ks-user-4v5k2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fe990ed0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=7cef47cc-35f2-4c36-ba40-ceb628cae300,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=7cef47cc-35f2-4c36-ba40-ceb628cae300,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/placement-ks-user-4v5k2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=7cef47cc-35f2-4c36-ba40-ceb628cae300;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=7cef47cc-35f2-4c36-ba40-ceb628cae300;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fe990ed0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identity=26494 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=7cef47cc-35f2-4c36-ba40-ceb628cae300,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=7cef47cc-35f2-4c36-ba40-ceb628cae300,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/placement-ks-user-4v5k2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4fe990ed0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identity=26494 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/placement-ks-user-4v5k2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fe990ed0d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1834 identity=26494 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/placement-ks-user-4v5k2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fe990ed0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1834 identity=26494 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/placement-ks-user-4v5k2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4fe990ed0d endpointID=1834 k8sNamespace=openstack k8sPodName=placement-ks-user-4v5k2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=7cef47cc-35f2-4c36-ba40-ceb628cae300 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=7cef47cc-35f2-4c36-ba40-ceb628cae300 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=4fe990ed0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1834 identity=26494 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/placement-ks-user-4v5k2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 3e3f1b49-3492-453a-b64b-689f737c7176 default }" containerID=d8d72e281348563b1ee59c745d2a6ca6e196bfd96a42b6aa83f5975ffd51b78e datapathConfiguration="&{false false false false false }" interface=lxc25ec0da0bc85 k8sPodName=openstack/placement-ks-endpoints-rw6sm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8d72e2813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3278 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/placement-ks-endpoints-rw6sm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8d72e2813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3278 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=f886caeb-19bb-4183-b80a-a3f3b9fcde55,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f886caeb-19bb-4183-b80a-a3f3b9fcde55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/placement-ks-endpoints-rw6sm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=f886caeb-19bb-4183-b80a-a3f3b9fcde55;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f886caeb-19bb-4183-b80a-a3f3b9fcde55;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8d72e2813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3278 identity=63149 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=f886caeb-19bb-4183-b80a-a3f3b9fcde55,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f886caeb-19bb-4183-b80a-a3f3b9fcde55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/placement-ks-endpoints-rw6sm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d8d72e2813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3278 identity=63149 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/placement-ks-endpoints-rw6sm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8d72e2813 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3278 identity=63149 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/placement-ks-endpoints-rw6sm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8d72e2813 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3278 identity=63149 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/placement-ks-endpoints-rw6sm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d8d72e2813 endpointID=3278 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-rw6sm subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=f886caeb-19bb-4183-b80a-a3f3b9fcde55 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f886caeb-19bb-4183-b80a-a3f3b9fcde55 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=d8d72e2813 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3278 identity=63149 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/placement-ks-endpoints-rw6sm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 08d50bdb-cb97-4cf2-952c-63cd9137328c default }" containerID=1b1951bf90ee0333c394df0a7e1889a872e13763c02d2f4e33b5c09c4d5e6fa5 datapathConfiguration="&{false false false false false }" interface=lxc1067706aeb3f k8sPodName=openstack/neutron-coredns-7dd4958666-db59r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b1951bf90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-db59r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b1951bf90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-db59r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1b1951bf90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-db59r line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1b1951bf90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identity=59093 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-db59r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b1951bf90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identity=59093 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-db59r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b1951bf90 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2139 identity=59093 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-db59r subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b1951bf90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2139 identity=59093 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-db59r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 2faee74a-2c7f-4600-974a-1144aa731e87 default }" containerID=d48550b1622b5a217b4456301ea71daa178cc1d2cf254255a5fdcc97f766a3a3 datapathConfiguration="&{false false false false false }" interface=lxc2b21f7d70b4f k8sPodName=local-path-storage/helper-pod-create-pvc-8b63a654-55dc-4800-b862-165e4a128d52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d48550b162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b63a654-55dc-4800-b862-165e4a128d52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d48550b162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b63a654-55dc-4800-b862-165e4a128d52 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d48550b162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=8353 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b63a654-55dc-4800-b862-165e4a128d52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d48550b162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=8353 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b63a654-55dc-4800-b862-165e4a128d52 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d48550b162 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=537 identity=8353 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b63a654-55dc-4800-b862-165e4a128d52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d48550b162 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=537 identity=8353 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b63a654-55dc-4800-b862-165e4a128d52 subsys=daemon level=info msg="Delete endpoint request" containerID=d48550b162 endpointID=537 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8b63a654-55dc-4800-b862-165e4a128d52 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d48550b162 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=537 identity=8353 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b63a654-55dc-4800-b862-165e4a128d52 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 1146cb40-0cf5-4cfa-8331-4a0b1c0da732 default }" containerID=720a0446a106b635cb479978a24615d50123b142770e5817a7a0e26df20f9c07 datapathConfiguration="&{false false false false false }" interface=lxc53c7a3665206 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=720a0446a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=720a0446a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=720a0446a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identity=8003 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=720a0446a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identity=8003 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=720a0446a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=432 identity=8003 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=720a0446a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=432 identity=8003 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.90 f8ff2d60-5b1e-49ff-a12e-dbbfc9dbcce2 default }" containerID=bcb923525ae07a95b551242f96f751bc8d4a36d668eb99a80f061e3c9a50905f datapathConfiguration="&{false false false false false }" interface=lxc35f488c85a92 k8sPodName=openstack/nova-api-osapi-7b5744f66d-86wjr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcb923525a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/nova-api-osapi-7b5744f66d-86wjr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcb923525a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/nova-api-osapi-7b5744f66d-86wjr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcb923525a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identity=28033 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/nova-api-osapi-7b5744f66d-86wjr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bcb923525a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=553 identity=28033 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/nova-api-osapi-7b5744f66d-86wjr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 ce63025a-46d7-4ee1-afe3-6cb8faabbb33 default }" containerID=c7e3f04e5bbd63fd89f6ee2a3e13b49637b5095dcf766cc0fa6964f458d0282d datapathConfiguration="&{false false false false false }" interface=lxc5694f77ab83c k8sPodName=openstack/nova-scheduler-78456494dd-j5qjz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7e3f04e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-scheduler-78456494dd-j5qjz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7e3f04e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-scheduler-78456494dd-j5qjz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7e3f04e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identity=38477 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-scheduler-78456494dd-j5qjz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7e3f04e5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identity=38477 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-scheduler-78456494dd-j5qjz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 60246067-eaa2-4391-a83d-2a748eb08ef0 default }" containerID=20d986143b761dcf561c5e6733679545df9b61befca986d857f44309bfd771a7 datapathConfiguration="&{false false false false false }" interface=lxc64bcf96f5cf6 k8sPodName=openstack/nova-api-metadata-6db54c9668-x9fnz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20d986143b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/nova-api-metadata-6db54c9668-x9fnz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20d986143b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/nova-api-metadata-6db54c9668-x9fnz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 18bdbf5c-e288-4945-a213-d10a5e0246d4 default }" containerID=77565f91568a14e03a224b657162121cc21c2ebf3bb749e16b530d706337a96a datapathConfiguration="&{false false false false false }" interface=lxc57cd9bef9051 k8sPodName=openstack/nova-conductor-59b45f7dcb-kvhbc labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=77565f9156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/nova-conductor-59b45f7dcb-kvhbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77565f9156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/nova-conductor-59b45f7dcb-kvhbc subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20d986143b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identity=46869 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/nova-api-metadata-6db54c9668-x9fnz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20d986143b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identity=46869 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/nova-api-metadata-6db54c9668-x9fnz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77565f9156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identity=23347 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/nova-conductor-59b45f7dcb-kvhbc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77565f9156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identity=23347 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/nova-conductor-59b45f7dcb-kvhbc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bcb923525a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=553 identity=28033 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/nova-api-osapi-7b5744f66d-86wjr subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcb923525a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=553 identity=28033 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/nova-api-osapi-7b5744f66d-86wjr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.169 4c7f5469-63ee-4e16-89bd-71e37499e784 default }" containerID=ecebb948befc389204163142f0050f4bafb60feff3ae66f80329a29d3d511027 datapathConfiguration="&{false false false false false }" interface=lxcd0d01c34cc61 k8sPodName=openstack/nova-cell-setup-q4hsh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecebb948be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/nova-cell-setup-q4hsh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 ac3bb614-3f0c-4ba6-911e-fb95f1f0d143 default }" containerID=6ae9c37d684dc8d212040bbda6ebe3a322b97a51ae37df4c769370434b8645b8 datapathConfiguration="&{false false false false false }" interface=lxc7776cb8a985c k8sPodName=openstack/nova-bootstrap-62h7v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ae9c37d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/nova-bootstrap-62h7v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecebb948be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=be32759a-bb72-480e-8127-4c017e6b7227,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=be32759a-bb72-480e-8127-4c017e6b7227,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/nova-cell-setup-q4hsh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ae9c37d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f11a92c4-0e76-4b88-b7ac-d15cac8e049e,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f11a92c4-0e76-4b88-b7ac-d15cac8e049e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/nova-bootstrap-62h7v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=c7e3f04e5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3892 identity=38477 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-scheduler-78456494dd-j5qjz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7e3f04e5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3892 identity=38477 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/nova-scheduler-78456494dd-j5qjz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=20d986143b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=109 identity=46869 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/nova-api-metadata-6db54c9668-x9fnz subsys=endpoint level=info msg="Successful endpoint creation" containerID=20d986143b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=109 identity=46869 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/nova-api-metadata-6db54c9668-x9fnz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.192 f5a2252e-384a-49a2-ba17-b1c30d82ca4e default }" containerID=3033e6ec8bbd8f107db25f05940df5994ab8fa45a57c2591838d58eed3100c62 datapathConfiguration="&{false false false false false }" interface=lxc5328d679e9e3 k8sPodName=openstack/nova-db-init-4tqdv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3033e6ec8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-db-init-4tqdv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3033e6ec8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2335a1b5-1965-4e1c-b8e1-2f405e33effd,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=2335a1b5-1965-4e1c-b8e1-2f405e33effd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-db-init-4tqdv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77565f9156 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=213 identity=23347 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/nova-conductor-59b45f7dcb-kvhbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=77565f9156 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=213 identity=23347 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/nova-conductor-59b45f7dcb-kvhbc subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=be32759a-bb72-480e-8127-4c017e6b7227;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=be32759a-bb72-480e-8127-4c017e6b7227;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecebb948be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 identity=20596 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=be32759a-bb72-480e-8127-4c017e6b7227,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=be32759a-bb72-480e-8127-4c017e6b7227,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/nova-cell-setup-q4hsh oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=ecebb948be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 identity=20596 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/nova-cell-setup-q4hsh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ecebb948be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1829 identity=20596 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/nova-cell-setup-q4hsh subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecebb948be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1829 identity=20596 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/nova-cell-setup-q4hsh subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=f11a92c4-0e76-4b88-b7ac-d15cac8e049e;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=f11a92c4-0e76-4b88-b7ac-d15cac8e049e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ae9c37d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identity=5503 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f11a92c4-0e76-4b88-b7ac-d15cac8e049e,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f11a92c4-0e76-4b88-b7ac-d15cac8e049e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/nova-bootstrap-62h7v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ae9c37d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identity=5503 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/nova-bootstrap-62h7v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=6ae9c37d68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2691 identity=5503 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/nova-bootstrap-62h7v subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ae9c37d68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2691 identity=5503 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/nova-bootstrap-62h7v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3033e6ec8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-db-init-4tqdv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=2335a1b5-1965-4e1c-b8e1-2f405e33effd;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=2335a1b5-1965-4e1c-b8e1-2f405e33effd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3033e6ec8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 identity=19717 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2335a1b5-1965-4e1c-b8e1-2f405e33effd,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=2335a1b5-1965-4e1c-b8e1-2f405e33effd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-db-init-4tqdv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3033e6ec8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 identity=19717 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-db-init-4tqdv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3033e6ec8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1345 identity=19717 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-db-init-4tqdv subsys=endpoint level=info msg="Successful endpoint creation" containerID=3033e6ec8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1345 identity=19717 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-db-init-4tqdv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 f948e3ee-4d8c-4d5b-ba75-148979e837cd default }" containerID=03ee7b76ca13f10426442df11985dda34bec967f845d2c48f9ac3f791451237e datapathConfiguration="&{false false false false false }" interface=lxc6b87e08bcb86 k8sPodName=openstack/nova-novncproxy-6fcc7945f-9j4xw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03ee7b76ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/nova-novncproxy-6fcc7945f-9j4xw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03ee7b76ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/nova-novncproxy-6fcc7945f-9j4xw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=03ee7b76ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/nova-novncproxy-6fcc7945f-9j4xw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03ee7b76ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identity=2853 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/nova-novncproxy-6fcc7945f-9j4xw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03ee7b76ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identity=2853 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/nova-novncproxy-6fcc7945f-9j4xw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03ee7b76ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1701 identity=2853 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/nova-novncproxy-6fcc7945f-9j4xw subsys=endpoint level=info msg="Successful endpoint creation" containerID=03ee7b76ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1701 identity=2853 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/nova-novncproxy-6fcc7945f-9j4xw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3033e6ec8b endpointID=1345 k8sNamespace=openstack k8sPodName=nova-db-init-4tqdv subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=2335a1b5-1965-4e1c-b8e1-2f405e33effd k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=2335a1b5-1965-4e1c-b8e1-2f405e33effd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=3033e6ec8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1345 identity=19717 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/nova-db-init-4tqdv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 24c364e6-cf1b-48b0-bcac-a79e1258e523 default }" containerID=2891e3c4d976ba136d666ca75b58ec6289637619c7638faca5bdc76fb5eb4e67 datapathConfiguration="&{false false false false false }" interface=lxca425430eb72d k8sPodName=openstack/nova-db-sync-f8dhr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2891e3c4d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-sync-f8dhr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2891e3c4d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9380e07a-c40a-45a8-9d40-6e64b17d050a,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=9380e07a-c40a-45a8-9d40-6e64b17d050a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-sync-f8dhr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2891e3c4d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-sync-f8dhr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=9380e07a-c40a-45a8-9d40-6e64b17d050a;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=9380e07a-c40a-45a8-9d40-6e64b17d050a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2891e3c4d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=32939 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9380e07a-c40a-45a8-9d40-6e64b17d050a,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=9380e07a-c40a-45a8-9d40-6e64b17d050a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-sync-f8dhr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2891e3c4d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=32939 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-sync-f8dhr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2891e3c4d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=521 identity=32939 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-sync-f8dhr subsys=endpoint level=info msg="Successful endpoint creation" containerID=2891e3c4d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=521 identity=32939 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-sync-f8dhr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2891e3c4d9 endpointID=521 k8sNamespace=openstack k8sPodName=nova-db-sync-f8dhr subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=9380e07a-c40a-45a8-9d40-6e64b17d050a k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=9380e07a-c40a-45a8-9d40-6e64b17d050a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=2891e3c4d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=521 identity=32939 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/nova-db-sync-f8dhr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 3a97238c-2f40-446c-8e39-12b7cbe650cf default }" containerID=c52a1862b7dfa30698996d51b3f50732cccef0fe65976ca50ea3c715ce908016 datapathConfiguration="&{false false false false false }" interface=lxcda099c4216ae k8sPodName=openstack/nova-rabbit-init-9rpgl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c52a1862b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3454 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/nova-rabbit-init-9rpgl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c52a1862b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3454 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d65763ea-19ad-4783-958e-5d1aef7b90ec,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d65763ea-19ad-4783-958e-5d1aef7b90ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/nova-rabbit-init-9rpgl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=d65763ea-19ad-4783-958e-5d1aef7b90ec;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d65763ea-19ad-4783-958e-5d1aef7b90ec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c52a1862b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3454 identity=3908 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d65763ea-19ad-4783-958e-5d1aef7b90ec,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d65763ea-19ad-4783-958e-5d1aef7b90ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/nova-rabbit-init-9rpgl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c52a1862b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3454 identity=3908 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/nova-rabbit-init-9rpgl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c52a1862b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3454 identity=3908 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/nova-rabbit-init-9rpgl subsys=endpoint level=info msg="Successful endpoint creation" containerID=c52a1862b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3454 identity=3908 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/nova-rabbit-init-9rpgl subsys=daemon level=info msg="Delete endpoint request" containerID=c52a1862b7 endpointID=3454 k8sNamespace=openstack k8sPodName=nova-rabbit-init-9rpgl subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=d65763ea-19ad-4783-958e-5d1aef7b90ec k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d65763ea-19ad-4783-958e-5d1aef7b90ec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=c52a1862b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3454 identity=3908 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/nova-rabbit-init-9rpgl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 83c62f60-187f-4040-a0eb-990f30226d4f default }" containerID=7a0d2c329975ed3214aed057ec558b641d05a14613d564e9866cd2dd0bcf158f datapathConfiguration="&{false false false false false }" interface=lxcc59376be715a k8sPodName=openstack/nova-ks-service-9wxbq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a0d2c3299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1768 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/nova-ks-service-9wxbq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a0d2c3299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1768 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2186483e-ccfa-4cd0-bb03-552dfb98e203,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=2186483e-ccfa-4cd0-bb03-552dfb98e203,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/nova-ks-service-9wxbq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=2186483e-ccfa-4cd0-bb03-552dfb98e203;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=2186483e-ccfa-4cd0-bb03-552dfb98e203;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a0d2c3299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1768 identity=4522 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2186483e-ccfa-4cd0-bb03-552dfb98e203,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=2186483e-ccfa-4cd0-bb03-552dfb98e203,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/nova-ks-service-9wxbq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a0d2c3299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1768 identity=4522 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/nova-ks-service-9wxbq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a0d2c3299 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1768 identity=4522 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/nova-ks-service-9wxbq subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a0d2c3299 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1768 identity=4522 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/nova-ks-service-9wxbq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a0d2c3299 endpointID=1768 k8sNamespace=openstack k8sPodName=nova-ks-service-9wxbq subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=2186483e-ccfa-4cd0-bb03-552dfb98e203 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=2186483e-ccfa-4cd0-bb03-552dfb98e203 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=7a0d2c3299 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1768 identity=4522 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/nova-ks-service-9wxbq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 b9b0d7a6-f2fc-42c1-81b1-b3a585969606 default }" containerID=60f56ff35bc9775d854c1f95178e7231c4c681f924959d550bb87792fa9268ba datapathConfiguration="&{false false false false false }" interface=lxcf6d427b346b8 k8sPodName=openstack/nova-ks-endpoints-f9m7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60f56ff35b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/nova-ks-endpoints-f9m7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60f56ff35b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=bc3f07bd-e096-4ad2-9fe3-c88bd836a1ca,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bc3f07bd-e096-4ad2-9fe3-c88bd836a1ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/nova-ks-endpoints-f9m7h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=bc3f07bd-e096-4ad2-9fe3-c88bd836a1ca;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=bc3f07bd-e096-4ad2-9fe3-c88bd836a1ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=60f56ff35b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=9476 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=bc3f07bd-e096-4ad2-9fe3-c88bd836a1ca,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bc3f07bd-e096-4ad2-9fe3-c88bd836a1ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/nova-ks-endpoints-f9m7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60f56ff35b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=9476 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/nova-ks-endpoints-f9m7h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60f56ff35b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=82 identity=9476 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/nova-ks-endpoints-f9m7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=60f56ff35b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=9476 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/nova-ks-endpoints-f9m7h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60f56ff35b endpointID=82 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-f9m7h subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=bc3f07bd-e096-4ad2-9fe3-c88bd836a1ca k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=bc3f07bd-e096-4ad2-9fe3-c88bd836a1ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=60f56ff35b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=9476 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/nova-ks-endpoints-f9m7h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 6ac6ccdc-47ec-4218-be82-7ca73cba56c2 default }" containerID=d0b368d2e6eb759f4c5fd44ca4a80ede7eda875a22e8af3c3a15aedf232db371 datapathConfiguration="&{false false false false false }" interface=lxc128821eb3d4a k8sPodName=openstack/nova-ks-user-zqfvl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0b368d2e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-ks-user-zqfvl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0b368d2e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=6e27286d-c13c-4fcb-a611-b50157ca6afa,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=6e27286d-c13c-4fcb-a611-b50157ca6afa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-ks-user-zqfvl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=6e27286d-c13c-4fcb-a611-b50157ca6afa;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=6e27286d-c13c-4fcb-a611-b50157ca6afa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d0b368d2e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=29807 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=6e27286d-c13c-4fcb-a611-b50157ca6afa,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=6e27286d-c13c-4fcb-a611-b50157ca6afa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-ks-user-zqfvl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0b368d2e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=29807 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-ks-user-zqfvl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0b368d2e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=287 identity=29807 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-ks-user-zqfvl subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0b368d2e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=287 identity=29807 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-ks-user-zqfvl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d0b368d2e6 endpointID=287 k8sNamespace=openstack k8sPodName=nova-ks-user-zqfvl subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=6e27286d-c13c-4fcb-a611-b50157ca6afa k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=6e27286d-c13c-4fcb-a611-b50157ca6afa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=d0b368d2e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=287 identity=29807 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-ks-user-zqfvl subsys=endpoint level=info msg="Delete endpoint request" containerID=6ae9c37d68 endpointID=2691 k8sNamespace=openstack k8sPodName=nova-bootstrap-62h7v subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=f11a92c4-0e76-4b88-b7ac-d15cac8e049e k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=f11a92c4-0e76-4b88-b7ac-d15cac8e049e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=6ae9c37d68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2691 identity=5503 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/nova-bootstrap-62h7v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 c83fa92d-1e87-45e4-b210-e5c4335bb648 default }" containerID=0b23c7eb6046dea21174e513643c3656cce1833f17c623a18a121b4125c27044 datapathConfiguration="&{false false false false false }" interface=lxce35c2ce0f423 k8sPodName=local-path-storage/helper-pod-create-pvc-b62e07c7-c54c-46a9-a1cb-92ebfe1d49a2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b23c7eb60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=637 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b62e07c7-c54c-46a9-a1cb-92ebfe1d49a2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b23c7eb60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=637 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b62e07c7-c54c-46a9-a1cb-92ebfe1d49a2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b23c7eb60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=637 identity=8353 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b62e07c7-c54c-46a9-a1cb-92ebfe1d49a2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b23c7eb60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=637 identity=8353 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b62e07c7-c54c-46a9-a1cb-92ebfe1d49a2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b23c7eb60 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=637 identity=8353 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b62e07c7-c54c-46a9-a1cb-92ebfe1d49a2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b23c7eb60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=637 identity=8353 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b62e07c7-c54c-46a9-a1cb-92ebfe1d49a2 subsys=daemon level=info msg="Delete endpoint request" containerID=0b23c7eb60 endpointID=637 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b62e07c7-c54c-46a9-a1cb-92ebfe1d49a2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0b23c7eb60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=637 identity=8353 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b62e07c7-c54c-46a9-a1cb-92ebfe1d49a2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 5acd9cba-3c6c-4b88-a438-814e230962c8 default }" containerID=eaedf3eb64af6111e153802d8b9602ea7ec93aee2639b2d461e365572cb550f7 datapathConfiguration="&{false false false false false }" interface=lxcee0f47281dca k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eaedf3eb64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3925 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eaedf3eb64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3925 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eaedf3eb64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3925 identity=18595 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eaedf3eb64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3925 identity=18595 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eaedf3eb64 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3925 identity=18595 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eaedf3eb64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3925 identity=18595 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.85 1546ec5c-023b-4314-b423-805f4c6419ad default }" containerID=e80c32df13632a447c7928ff5bf1e13433f33c0e7dccf612b59c041a916ec126 datapathConfiguration="&{false false false false false }" interface=lxc167fffe171c4 k8sPodName=openstack/neutron-rpc-server-77c6bbd77d-r6xg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e80c32df13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/neutron-rpc-server-77c6bbd77d-r6xg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e80c32df13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/neutron-rpc-server-77c6bbd77d-r6xg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e80c32df13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=18528 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/neutron-rpc-server-77c6bbd77d-r6xg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e80c32df13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=18528 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/neutron-rpc-server-77c6bbd77d-r6xg9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 d62f5ac0-5683-4995-b669-ca348c1e26e0 default }" containerID=9f7839053678c65175cbdd74f87166bac25a0d3329cb099ac744c4a58974fea0 datapathConfiguration="&{false false false false false }" interface=lxc1bfe397e156f k8sPodName=openstack/neutron-server-bff59fdd8-fv8j7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f78390536 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/neutron-server-bff59fdd8-fv8j7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f78390536 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/neutron-server-bff59fdd8-fv8j7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f78390536 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 identity=26871 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/neutron-server-bff59fdd8-fv8j7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f78390536 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 identity=26871 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/neutron-server-bff59fdd8-fv8j7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e80c32df13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1103 identity=18528 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/neutron-rpc-server-77c6bbd77d-r6xg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e80c32df13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1103 identity=18528 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/neutron-rpc-server-77c6bbd77d-r6xg9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9f78390536 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2027 identity=26871 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/neutron-server-bff59fdd8-fv8j7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f78390536 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2027 identity=26871 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/neutron-server-bff59fdd8-fv8j7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.171 ab57f17f-8cc1-4311-9cf7-f802c223ff87 default }" containerID=98675ee3f1dd5e92e18fba98feb01a9fdf01d75983c7c8c8a801883182e83ab2 datapathConfiguration="&{false false false false false }" interface=lxce50a6eaef7f0 k8sPodName=openstack/neutron-db-init-2l7qz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98675ee3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/neutron-db-init-2l7qz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98675ee3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=0aa47fc0-5271-4406-955d-491d994a5d86,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=0aa47fc0-5271-4406-955d-491d994a5d86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/neutron-db-init-2l7qz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=0aa47fc0-5271-4406-955d-491d994a5d86;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=0aa47fc0-5271-4406-955d-491d994a5d86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98675ee3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=22379 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=0aa47fc0-5271-4406-955d-491d994a5d86,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=0aa47fc0-5271-4406-955d-491d994a5d86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/neutron-db-init-2l7qz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98675ee3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=22379 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/neutron-db-init-2l7qz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98675ee3f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=81 identity=22379 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/neutron-db-init-2l7qz subsys=endpoint level=info msg="Successful endpoint creation" containerID=98675ee3f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=81 identity=22379 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/neutron-db-init-2l7qz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=98675ee3f1 endpointID=81 k8sNamespace=openstack k8sPodName=neutron-db-init-2l7qz subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=0aa47fc0-5271-4406-955d-491d994a5d86 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=0aa47fc0-5271-4406-955d-491d994a5d86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=98675ee3f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=81 identity=22379 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/neutron-db-init-2l7qz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 2fc7d36a-d04b-4d0b-960c-e276b1c4e486 default }" containerID=9fee5442154fa3db65e4708af37c23d7935ee78cbd99f4db0c799c964cd15b52 datapathConfiguration="&{false false false false false }" interface=lxc22d3e8e4c3d4 k8sPodName=openstack/neutron-db-sync-qklcc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fee544215 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/neutron-db-sync-qklcc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fee544215 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d52ea9c2-21ba-44b5-aed7-8c1abbd2e01c,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=d52ea9c2-21ba-44b5-aed7-8c1abbd2e01c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/neutron-db-sync-qklcc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=d52ea9c2-21ba-44b5-aed7-8c1abbd2e01c;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=d52ea9c2-21ba-44b5-aed7-8c1abbd2e01c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9fee544215 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=2386 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d52ea9c2-21ba-44b5-aed7-8c1abbd2e01c,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=d52ea9c2-21ba-44b5-aed7-8c1abbd2e01c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/neutron-db-sync-qklcc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fee544215 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=2386 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/neutron-db-sync-qklcc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9fee544215 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1818 identity=2386 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/neutron-db-sync-qklcc subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fee544215 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1818 identity=2386 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/neutron-db-sync-qklcc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9fee544215 endpointID=1818 k8sNamespace=openstack k8sPodName=neutron-db-sync-qklcc subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=d52ea9c2-21ba-44b5-aed7-8c1abbd2e01c k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=d52ea9c2-21ba-44b5-aed7-8c1abbd2e01c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=9fee544215 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1818 identity=2386 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/neutron-db-sync-qklcc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 d12c536a-d94a-4051-b106-ddc18c158713 default }" containerID=872816c7dbce99a07db38be0261c7241c280b371148895a9c5c3399e7cf188d5 datapathConfiguration="&{false false false false false }" interface=lxced75fb47a6c9 k8sPodName=openstack/neutron-rabbit-init-9vj9n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=872816c7db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/neutron-rabbit-init-9vj9n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=872816c7db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=bdab92f1-d259-42c6-8f03-033371b41252,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bdab92f1-d259-42c6-8f03-033371b41252,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/neutron-rabbit-init-9vj9n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=bdab92f1-d259-42c6-8f03-033371b41252;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=bdab92f1-d259-42c6-8f03-033371b41252;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=872816c7db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identity=11132 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=bdab92f1-d259-42c6-8f03-033371b41252,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bdab92f1-d259-42c6-8f03-033371b41252,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/neutron-rabbit-init-9vj9n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=872816c7db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identity=11132 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/neutron-rabbit-init-9vj9n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=872816c7db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=86 identity=11132 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/neutron-rabbit-init-9vj9n subsys=endpoint level=info msg="Successful endpoint creation" containerID=872816c7db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=86 identity=11132 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/neutron-rabbit-init-9vj9n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=872816c7db endpointID=86 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-9vj9n subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=bdab92f1-d259-42c6-8f03-033371b41252 k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=bdab92f1-d259-42c6-8f03-033371b41252 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=872816c7db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=86 identity=11132 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/neutron-rabbit-init-9vj9n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 6c577bda-ef43-4f12-9386-1fa7c7622fd4 default }" containerID=981245cfaa580a99e30b6647c51042f744508e2fc7ac22dd626f360df94b0f06 datapathConfiguration="&{false false false false false }" interface=lxc320aa203dfca k8sPodName=openstack/neutron-ks-service-sngcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=981245cfaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-service-sngcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=981245cfaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=ce848039-ae02-442b-b929-ee6059358e0c,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=ce848039-ae02-442b-b929-ee6059358e0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-service-sngcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=ce848039-ae02-442b-b929-ee6059358e0c;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=ce848039-ae02-442b-b929-ee6059358e0c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=981245cfaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-service-sngcw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=981245cfaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 identity=60940 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=ce848039-ae02-442b-b929-ee6059358e0c,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=ce848039-ae02-442b-b929-ee6059358e0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-service-sngcw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=981245cfaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 identity=60940 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-service-sngcw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=981245cfaa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=978 identity=60940 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-service-sngcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=981245cfaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=978 identity=60940 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-service-sngcw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=981245cfaa endpointID=978 k8sNamespace=openstack k8sPodName=neutron-ks-service-sngcw subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=ce848039-ae02-442b-b929-ee6059358e0c k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=ce848039-ae02-442b-b929-ee6059358e0c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=981245cfaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=978 identity=60940 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/neutron-ks-service-sngcw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 5c8b4656-9bc9-46fe-9b10-c9013e361665 default }" containerID=00865b8c9e59a692c818aa3bd830e1e2c7c3ba1ccec6ee0f87b821a1e0f2a0e9 datapathConfiguration="&{false false false false false }" interface=lxc6a6670185bd4 k8sPodName=openstack/neutron-ks-endpoints-s5b6s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00865b8c9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-ks-endpoints-s5b6s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00865b8c9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=0f3c1975-a11b-425b-be13-799ce8c33e65,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0f3c1975-a11b-425b-be13-799ce8c33e65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-ks-endpoints-s5b6s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=0f3c1975-a11b-425b-be13-799ce8c33e65;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0f3c1975-a11b-425b-be13-799ce8c33e65;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=00865b8c9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 identity=42540 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=0f3c1975-a11b-425b-be13-799ce8c33e65,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0f3c1975-a11b-425b-be13-799ce8c33e65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-ks-endpoints-s5b6s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00865b8c9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 identity=42540 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-ks-endpoints-s5b6s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00865b8c9e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1026 identity=42540 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-ks-endpoints-s5b6s subsys=endpoint level=info msg="Successful endpoint creation" containerID=00865b8c9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1026 identity=42540 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-ks-endpoints-s5b6s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=00865b8c9e endpointID=1026 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-s5b6s subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=0f3c1975-a11b-425b-be13-799ce8c33e65 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0f3c1975-a11b-425b-be13-799ce8c33e65 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=00865b8c9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1026 identity=42540 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-ks-endpoints-s5b6s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 5d515d2a-2735-49d9-930f-745ef6b72263 default }" containerID=9b6935b48eeb52c0d269a428d234ec27fd8a3b0fb9e06921bb317091f8110603 datapathConfiguration="&{false false false false false }" interface=lxc08ba0c525352 k8sPodName=openstack/neutron-ks-user-vz8fx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b6935b48e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/neutron-ks-user-vz8fx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b6935b48e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=ceff0a04-7558-48f5-a78b-8bbaacf80a2a,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=ceff0a04-7558-48f5-a78b-8bbaacf80a2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/neutron-ks-user-vz8fx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=ceff0a04-7558-48f5-a78b-8bbaacf80a2a;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=ceff0a04-7558-48f5-a78b-8bbaacf80a2a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b6935b48e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identity=782 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=ceff0a04-7558-48f5-a78b-8bbaacf80a2a,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=ceff0a04-7558-48f5-a78b-8bbaacf80a2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/neutron-ks-user-vz8fx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b6935b48e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identity=782 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/neutron-ks-user-vz8fx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b6935b48e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2008 identity=782 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/neutron-ks-user-vz8fx subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b6935b48e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2008 identity=782 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/neutron-ks-user-vz8fx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9b6935b48e endpointID=2008 k8sNamespace=openstack k8sPodName=neutron-ks-user-vz8fx subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=ceff0a04-7558-48f5-a78b-8bbaacf80a2a k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=ceff0a04-7558-48f5-a78b-8bbaacf80a2a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=9b6935b48e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2008 identity=782 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/neutron-ks-user-vz8fx subsys=endpoint