level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.027478ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="59.952µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.080009ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="13.071µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=100.166958ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="10.311µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.04µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="49.951µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="54.922µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="66.802µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="408.652µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.52µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=14.417804ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.97418ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="29.651µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="50.841µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="235.626µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="99.742µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="73.002µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.029373ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="101.752µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="4.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.227.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.421617ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="5.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.046992ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="12.71µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.726703ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.32µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration=890ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration=970ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration=910ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.101µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="19.431µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.351µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="38.571µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="242.296µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="1.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.34µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="152.234µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="657.618µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.08582ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.581µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="23.221µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.227 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.227 ipAddr.ipv6="" k8sNodeIP=199.204.45.227 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.227" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.28" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.227" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.227} {CiliumInternalIP 10.0.0.28}] 10.0.0.0/24 [] [] 10.0.0.182 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:36121" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.462903531s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="16.47µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.63µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="36.371µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.481µs" function="*job.group.Start" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.422460351s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.250 13678695-aee5-4d48-bd02-ed1cbc63b27e default }" containerID=406f1490d9ac3073b32d8fbd32b084842573df4232d65b3adf26fdb86e1f0b66 datapathConfiguration="&{false false false false false }" interface=lxca1c63005aff0 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gbcb5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=406f1490d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 ipv4=10.0.0.250 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gbcb5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=406f1490d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=efd7f559-9568-4329-bd3a-5d877e085551,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=efd7f559-9568-4329-bd3a-5d877e085551,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.250 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gbcb5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=efd7f559-9568-4329-bd3a-5d877e085551;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=efd7f559-9568-4329-bd3a-5d877e085551;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=406f1490d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identity=16468 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=efd7f559-9568-4329-bd3a-5d877e085551,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=efd7f559-9568-4329-bd3a-5d877e085551,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.250 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gbcb5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=406f1490d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identity=16468 ipv4=10.0.0.250 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gbcb5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 9783eac6-0d5b-4b68-a138-18b4646b3854 default }" containerID=c0706b4c00e3e1e37f9030e3c4d0974581c1e4133febc12637b2dc9d131a4de5 datapathConfiguration="&{false false false false false }" interface=lxc5b5d24b843ed k8sPodName=kube-system/coredns-7c96b6546b-qrjgc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0706b4c00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qrjgc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0706b4c00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qrjgc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0706b4c00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=7069 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qrjgc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0706b4c00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=7069 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qrjgc subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=337.193607ms file-path=/var/run/cilium/state/templates/58f3a17d5de0230508cb6846913e32bacbb7a943e206c50ef30bc4ff8bee146e/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=340 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4034 ipv4=10.0.0.182 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4034 identityLabels="reserved:health" ipv4=10.0.0.182 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4034 identity=4 identityLabels="reserved:health" ipv4=10.0.0.182 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.100987365s file-path=/var/run/cilium/state/templates/0db39a82f0ebf8e9459108585d3504b7503bbcca367e8023801c7bb6380f2b82/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=406f1490d9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=478 identity=16468 ipv4=10.0.0.250 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gbcb5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=406f1490d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=478 identity=16468 ipv4=10.0.0.250 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gbcb5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4034 identity=4 ipv4=10.0.0.182 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0706b4c00 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1075 identity=7069 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qrjgc subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0706b4c00 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1075 identity=7069 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qrjgc subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=406f1490d9 endpointID=478 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-gbcb5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=efd7f559-9568-4329-bd3a-5d877e085551 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=efd7f559-9568-4329-bd3a-5d877e085551 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=406f1490d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=478 identity=16468 ipv4=10.0.0.250 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gbcb5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 fe04b850-c711-48b5-8e1c-c14f7faf91fe default }" containerID=7ae58c1e38322ea2c9d7d0abc189c8d175c348ad45af248573a1392f06b7a71b datapathConfiguration="&{false false false false false }" interface=lxcfcb541793ef6 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dhckq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ae58c1e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dhckq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ae58c1e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dhckq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7ae58c1e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dhckq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ae58c1e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identity=21625 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dhckq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ae58c1e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identity=21625 ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dhckq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ae58c1e38 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=604 identity=21625 ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dhckq subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ae58c1e38 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=604 identity=21625 ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dhckq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=340 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00340 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00340 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00340 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00340:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=340 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 89d0ed37-f2a0-4327-94f3-270a75871a99 default }" containerID=5605674c75846e3f89013ef18115b31aed71c68c10b65e9ed3340c8f353d3e60 datapathConfiguration="&{false false false false false }" interface=lxc70e0182ce274 k8sPodName=kube-system/coredns-67659f764b-84cv7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5605674c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 ipv4=10.0.0.125 ipv6= k8sPodName=kube-system/coredns-67659f764b-84cv7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5605674c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.125 ipv6= k8sPodName=kube-system/coredns-67659f764b-84cv7 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5605674c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 identity=7069 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.125 ipv6= k8sPodName=kube-system/coredns-67659f764b-84cv7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5605674c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 identity=7069 ipv4=10.0.0.125 ipv6= k8sPodName=kube-system/coredns-67659f764b-84cv7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 d9a7655e-bfab-410c-a01c-2948ecee19a9 default }" containerID=fc83ad5be0b906e12d45d173a82437999e79b48ebed91e2d00deb10421695dc2 datapathConfiguration="&{false false false false false }" interface=lxc3bd5a89b01cc k8sPodName=kube-system/coredns-67659f764b-sll8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc83ad5be0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 ipv4=10.0.0.150 ipv6= k8sPodName=kube-system/coredns-67659f764b-sll8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc83ad5be0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.150 ipv6= k8sPodName=kube-system/coredns-67659f764b-sll8p subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fc83ad5be0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=7069 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.150 ipv6= k8sPodName=kube-system/coredns-67659f764b-sll8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc83ad5be0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=7069 ipv4=10.0.0.150 ipv6= k8sPodName=kube-system/coredns-67659f764b-sll8p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5605674c75 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1624 identity=7069 ipv4=10.0.0.125 ipv6= k8sPodName=kube-system/coredns-67659f764b-84cv7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5605674c75 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1624 identity=7069 ipv4=10.0.0.125 ipv6= k8sPodName=kube-system/coredns-67659f764b-84cv7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fc83ad5be0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1533 identity=7069 ipv4=10.0.0.150 ipv6= k8sPodName=kube-system/coredns-67659f764b-sll8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc83ad5be0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1533 identity=7069 ipv4=10.0.0.150 ipv6= k8sPodName=kube-system/coredns-67659f764b-sll8p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.122 5b5b362d-a4b0-421a-b8f1-4a31c5f2972e default }" containerID=7f848b84677aaba7ac4018d84f6cfa4948311a4578318077acd92bce8cbd838d datapathConfiguration="&{false false false false false }" interface=lxcb215693a4857 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mjr9r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f848b8467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mjr9r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f848b8467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mjr9r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7f848b8467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mjr9r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f848b8467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=59023 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mjr9r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f848b8467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=59023 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mjr9r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f848b8467 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1150 identity=59023 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mjr9r subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f848b8467 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1150 identity=59023 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mjr9r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c0706b4c00 endpointID=1075 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-qrjgc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=c0706b4c00 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1075 identity=7069 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qrjgc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 a7c8e630-5a34-4d4e-8ba4-efeca6276263 default }" containerID=d2209f8039764aa9530a8e5acb1486375eccb0a74efc48af9d9841589ad55b06 datapathConfiguration="&{false false false false false }" interface=lxc92668e49ffcb k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-6vt68 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2209f8039 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 ipv4=10.0.0.51 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-6vt68 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2209f8039 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.51 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-6vt68 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2209f8039 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identity=26244 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.51 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-6vt68 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d2209f8039 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identity=26244 ipv4=10.0.0.51 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-6vt68 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 c2bb19c5-9ca5-45bb-a01a-52566bde13a7 default }" containerID=eee5fd37509764489dffa18819420af70f3efc3b60a8f95167b276b0bb2dfd03 datapathConfiguration="&{false false false false false }" interface=lxc643bc9a08aba k8sPodName=cert-manager/cert-manager-79c48d47db-4m2xn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eee5fd3750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2267 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-4m2xn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eee5fd3750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2267 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-4m2xn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 cc18f2d9-7adb-4018-90f1-16077ea58d2d default }" containerID=42f33d1fd6fcf94413e8c22b9b74808e99e73f6ae360d25947bfbeb2409b94a7 datapathConfiguration="&{false false false false false }" interface=lxccd8aeb6a0f71 k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-vpgt4 labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=42f33d1fd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 ipv4=10.0.0.237 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-vpgt4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42f33d1fd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.237 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-vpgt4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eee5fd3750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2267 identity=17101 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-4m2xn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eee5fd3750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2267 identity=17101 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-4m2xn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42f33d1fd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identity=51459 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.237 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-vpgt4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42f33d1fd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identity=51459 ipv4=10.0.0.237 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-vpgt4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2209f8039 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=996 identity=26244 ipv4=10.0.0.51 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-6vt68 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2209f8039 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=996 identity=26244 ipv4=10.0.0.51 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-6vt68 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=eee5fd3750 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2267 identity=17101 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-4m2xn subsys=endpoint level=info msg="Successful endpoint creation" containerID=eee5fd3750 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2267 identity=17101 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-4m2xn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=42f33d1fd6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=853 identity=51459 ipv4=10.0.0.237 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-vpgt4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=42f33d1fd6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=853 identity=51459 ipv4=10.0.0.237 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-vpgt4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.35 d0a3b183-469d-4add-86e1-8e96c293afe8 default }" containerID=90158d898eb6beb724ca50fccda26ad1d58fcbc09d9ab8f1dd5e2180e7ea9b2a datapathConfiguration="&{false false false false false }" interface=lxc0cc4ade40859 k8sPodName=cert-manager/cert-manager-startupapicheck-48ln9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90158d898e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-48ln9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90158d898e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=8ed56cd9-89a5-4089-b713-b8f788694ce0,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=8ed56cd9-89a5-4089-b713-b8f788694ce0,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-48ln9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=8ed56cd9-89a5-4089-b713-b8f788694ce0;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=8ed56cd9-89a5-4089-b713-b8f788694ce0;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90158d898e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 identity=37289 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=8ed56cd9-89a5-4089-b713-b8f788694ce0,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=8ed56cd9-89a5-4089-b713-b8f788694ce0,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-48ln9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90158d898e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 identity=37289 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-48ln9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90158d898e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1621 identity=37289 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-48ln9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=90158d898e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1621 identity=37289 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-48ln9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=90158d898e endpointID=1621 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-48ln9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=8ed56cd9-89a5-4089-b713-b8f788694ce0 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=8ed56cd9-89a5-4089-b713-b8f788694ce0 k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=90158d898e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1621 identity=37289 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-48ln9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 eec2bea0-c164-4cd6-b342-f16f15ee0eb5 default }" containerID=325b382b33791c9cf123eb14c01d8069399edfa58fff3125b3fcc7cad4f36254 datapathConfiguration="&{false false false false false }" interface=lxcd658e67d0d24 k8sPodName=ingress-nginx/ingress-nginx-admission-create-tfkxj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=325b382b33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 ipv4=10.0.0.99 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tfkxj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=325b382b33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=85b3cdcd-00fe-4f13-a99a-e8005bd4c517,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=85b3cdcd-00fe-4f13-a99a-e8005bd4c517,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.99 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tfkxj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=85b3cdcd-00fe-4f13-a99a-e8005bd4c517;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=85b3cdcd-00fe-4f13-a99a-e8005bd4c517;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=325b382b33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=26182 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=85b3cdcd-00fe-4f13-a99a-e8005bd4c517,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=85b3cdcd-00fe-4f13-a99a-e8005bd4c517,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.99 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tfkxj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=325b382b33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=26182 ipv4=10.0.0.99 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tfkxj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=325b382b33 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=264 identity=26182 ipv4=10.0.0.99 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tfkxj subsys=endpoint level=info msg="Successful endpoint creation" containerID=325b382b33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=264 identity=26182 ipv4=10.0.0.99 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tfkxj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=325b382b33 endpointID=264 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-tfkxj subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=85b3cdcd-00fe-4f13-a99a-e8005bd4c517 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=85b3cdcd-00fe-4f13-a99a-e8005bd4c517 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=325b382b33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=264 identity=26182 ipv4=10.0.0.99 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tfkxj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 75681d84-569d-4420-a877-549c1743925e default }" containerID=e8329f26f66fddf0a99c90dac0e38c91600941c42a30b09e831aa7f4c7735de1 datapathConfiguration="&{false false false false false }" interface=lxc41a15f11d1de k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s8rrs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8329f26f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 ipv4=10.0.0.227 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s8rrs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8329f26f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.227 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s8rrs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8329f26f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identity=61312 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.227 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s8rrs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8329f26f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identity=61312 ipv4=10.0.0.227 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s8rrs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e8329f26f6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1469 identity=61312 ipv4=10.0.0.227 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s8rrs subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8329f26f6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1469 identity=61312 ipv4=10.0.0.227 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s8rrs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.218 f098ddd1-3eb1-4e40-a053-ce5834f87a77 default }" containerID=847f14413c199a4a67965e144490216abb7ff22429f4d3425b9df5b67e6f3784 datapathConfiguration="&{false false false false false }" interface=lxca82e5b3947d3 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jm87h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=847f14413c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jm87h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=847f14413c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5d855e22-a3c2-47de-88a9-dd59e26ea2c8,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=5d855e22-a3c2-47de-88a9-dd59e26ea2c8,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jm87h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=5d855e22-a3c2-47de-88a9-dd59e26ea2c8;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=5d855e22-a3c2-47de-88a9-dd59e26ea2c8;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=847f14413c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identity=14456 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5d855e22-a3c2-47de-88a9-dd59e26ea2c8,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=5d855e22-a3c2-47de-88a9-dd59e26ea2c8,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jm87h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=847f14413c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identity=14456 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jm87h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=847f14413c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=664 identity=14456 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jm87h subsys=endpoint level=info msg="Successful endpoint creation" containerID=847f14413c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=664 identity=14456 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jm87h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=847f14413c endpointID=664 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-jm87h subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=5d855e22-a3c2-47de-88a9-dd59e26ea2c8 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=5d855e22-a3c2-47de-88a9-dd59e26ea2c8 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=847f14413c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=664 identity=14456 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jm87h subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=fc8d0eb0-a75c-43f9-a030-aad99e0f496c] Description:}]" policyAddRequest=a1d315dd-dbe8-4890-bf19-3ca0df4df6b2 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a1d315dd-dbe8-4890-bf19-3ca0df4df6b2 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3596816b-d394-4f58-982a-c4dd2a59e66f] Description:}]" policyAddRequest=b2005429-4c45-4fc9-b532-a583e6854a57 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=b2005429-4c45-4fc9-b532-a583e6854a57 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 aeddfca3-48bd-436c-aca5-c7b0dc98d36c default }" containerID=4564ea1d5e20cd0c485e6b283226c8336a7190ef628c68708c4082e4903ac5fc datapathConfiguration="&{false false false false false }" interface=lxc86189e36eaa5 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cl72b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4564ea1d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cl72b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4564ea1d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cl72b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 dd9a3aff-8517-4acc-afab-e6e9916d2c2f default }" containerID=92c0c40d2932b737177c24623820367ef321628774c38368cc217c35c811a283 datapathConfiguration="&{false false false false false }" interface=lxca3d31ff63d62 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8n49j labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=92c0c40d29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8n49j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92c0c40d29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8n49j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=92c0c40d29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8n49j line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=4564ea1d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cl72b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4564ea1d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=34429 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cl72b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4564ea1d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=34429 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cl72b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92c0c40d29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identity=47273 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8n49j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92c0c40d29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identity=47273 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8n49j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4564ea1d5e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=514 identity=34429 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cl72b subsys=endpoint level=info msg="Successful endpoint creation" containerID=4564ea1d5e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=514 identity=34429 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cl72b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=92c0c40d29 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1332 identity=47273 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8n49j subsys=endpoint level=info msg="Successful endpoint creation" containerID=92c0c40d29 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1332 identity=47273 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8n49j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.95 8aa44366-2d93-4697-91b1-2dbade5cce1e default }" containerID=0668f112f5626552b1c60e520d63f0580ae7b01ac8ff77e0075cc5d00d9bc7ac datapathConfiguration="&{false false false false false }" interface=lxca2ad32a1307e k8sPodName=openstack/pxc-operator-69cb5bbdb9-4mtzr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0668f112f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4mtzr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0668f112f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4mtzr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0668f112f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identity=4603 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4mtzr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0668f112f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identity=4603 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4mtzr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0668f112f5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2737 identity=4603 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4mtzr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0668f112f5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2737 identity=4603 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4mtzr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 a63206f7-083b-4aee-ac10-0725f1d6ac83 default }" containerID=b11864b0a9f46e4421483ae3a134649e1351345e2053d232d4aba1a29aaff867 datapathConfiguration="&{false false false false false }" interface=lxc8db0b3b97fe3 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b11864b0a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b11864b0a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b11864b0a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identity=9734 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b11864b0a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identity=9734 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 3fb49970-b529-4003-9989-9cf6cf850049 default }" containerID=c931d2d250b6434d0b748dc5c4a4b121592e4abb9830232412e35a17186e7442 datapathConfiguration="&{false false false false false }" interface=lxcd9998465a5fd k8sPodName=local-path-storage/helper-pod-create-pvc-d4f0be31-9042-4ec8-b25b-ed258ad701a4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c931d2d250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3875 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4f0be31-9042-4ec8-b25b-ed258ad701a4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c931d2d250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3875 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4f0be31-9042-4ec8-b25b-ed258ad701a4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c931d2d250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3875 identity=25051 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4f0be31-9042-4ec8-b25b-ed258ad701a4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c931d2d250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3875 identity=25051 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4f0be31-9042-4ec8-b25b-ed258ad701a4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b11864b0a9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1110 identity=9734 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b11864b0a9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1110 identity=9734 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c931d2d250 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3875 identity=25051 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4f0be31-9042-4ec8-b25b-ed258ad701a4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c931d2d250 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3875 identity=25051 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4f0be31-9042-4ec8-b25b-ed258ad701a4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c931d2d250 endpointID=3875 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d4f0be31-9042-4ec8-b25b-ed258ad701a4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c931d2d250 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3875 identity=25051 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4f0be31-9042-4ec8-b25b-ed258ad701a4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 66df82c0-09e8-48ed-88a1-b8d7950ae8d5 default }" containerID=faa1ea62313f464637a974f23cb65d1c275e9d9d8607739bd9ce82184bb16490 datapathConfiguration="&{false false false false false }" interface=lxcc6e7ec97ff6e k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=faa1ea6231 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=faa1ea6231 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=faa1ea6231 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.215 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=faa1ea6231 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=15057 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=faa1ea6231 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=15057 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=faa1ea6231 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=547 identity=15057 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=faa1ea6231 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=547 identity=15057 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=1d651fb2-1c1a-40d9-b4fd-72d4ffbf2677] Description:}]" policyAddRequest=7c81d022-1287-43c3-9a52-ef44b6bb358a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7c81d022-1287-43c3-9a52-ef44b6bb358a policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.53 06c8bba3-75d1-4e41-834b-74daad1a54fa default }" containerID=c2dc2477d110775d5534df93b1507d7389c8733629c0b1734c15edd0fa38ff39 datapathConfiguration="&{false false false false false }" interface=lxc36413bcf0e79 k8sPodName=local-path-storage/helper-pod-create-pvc-f50e4dbc-163e-49cd-a3c9-3a80e60c275c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2dc2477d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f50e4dbc-163e-49cd-a3c9-3a80e60c275c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2dc2477d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f50e4dbc-163e-49cd-a3c9-3a80e60c275c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2dc2477d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=25051 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f50e4dbc-163e-49cd-a3c9-3a80e60c275c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2dc2477d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=25051 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f50e4dbc-163e-49cd-a3c9-3a80e60c275c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2dc2477d1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1173 identity=25051 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f50e4dbc-163e-49cd-a3c9-3a80e60c275c subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2dc2477d1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1173 identity=25051 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f50e4dbc-163e-49cd-a3c9-3a80e60c275c subsys=daemon level=info msg="Delete endpoint request" containerID=c2dc2477d1 endpointID=1173 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f50e4dbc-163e-49cd-a3c9-3a80e60c275c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c2dc2477d1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1173 identity=25051 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f50e4dbc-163e-49cd-a3c9-3a80e60c275c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 a7c0f081-2c4e-4241-ba49-6295d8f97ef5 default }" containerID=4d50d04110e13fae02014703a98be67fcbd39038425964fa6b64fe357549d047 datapathConfiguration="&{false false false false false }" interface=lxcc6c7f57b533f k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d50d04110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3433 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d50d04110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3433 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4d50d04110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3433 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d50d04110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3433 identity=58067 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d50d04110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3433 identity=58067 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d50d04110 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3433 identity=58067 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d50d04110 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3433 identity=58067 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=51649ee6-895a-4846-8b27-88ddfb9f5a72] Description:}]" policyAddRequest=f502176a-cea8-4d8c-87e1-08e21e9aff28 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=f502176a-cea8-4d8c-87e1-08e21e9aff28 policyRevision=5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.204 5bc9c035-77c8-4f51-937a-6c1942dd679a default }" containerID=0da342dde5a3e9c87fdde6f60d16a8cf92c1f82cc05171e0913e7528b96f929c datapathConfiguration="&{false false false false false }" interface=lxc0b8a9469b9b4 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0da342dde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3678 ipv4=10.0.0.204 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0da342dde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3678 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.204 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0da342dde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3678 identity=7737 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.204 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0da342dde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3678 identity=7737 ipv4=10.0.0.204 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0da342dde5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3678 identity=7737 ipv4=10.0.0.204 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0da342dde5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3678 identity=7737 ipv4=10.0.0.204 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008217565977247826 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.56 0f478302-2155-4215-9d0b-fdfa707b79b8 default }" containerID=264df81d2a0fb8c86edb9f9fb7290f3dbe49fd4cddf37cd243dddd1dcf9c2d06 datapathConfiguration="&{false false false false false }" interface=lxcbede30abbe48 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g7kch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=264df81d2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g7kch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=264df81d2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g7kch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=264df81d2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g7kch line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=264df81d2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identity=26686 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g7kch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=264df81d2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identity=26686 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g7kch subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 41e3a7db-3166-41b5-87e6-03fb331e0581 default }" containerID=7dd72ceda593d36ffc3e37bf64f8ad66a5b7e288928d9fc64b116a83f9031ebb datapathConfiguration="&{false false false false false }" interface=lxcb6da99cd67e7 k8sPodName=monitoring/node-feature-discovery-worker-dwkh7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7dd72ceda5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dwkh7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7dd72ceda5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dwkh7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.232 3b4115cf-a0df-482b-aafe-5a4c4217eb51 default }" containerID=048e7525f081667cb82c797cfd42279b8050df65130d8853e0c97419ff14117f datapathConfiguration="&{false false false false false }" interface=lxcc6f7cab209ae k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c88kd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=048e7525f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c88kd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=048e7525f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c88kd subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7dd72ceda5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identity=40659 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dwkh7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7dd72ceda5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identity=40659 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dwkh7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=048e7525f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identity=3379 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c88kd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=048e7525f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identity=3379 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c88kd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=264df81d2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=629 identity=26686 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g7kch subsys=endpoint level=info msg="Successful endpoint creation" containerID=264df81d2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=629 identity=26686 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g7kch subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=048e7525f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1782 identity=3379 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c88kd subsys=endpoint level=info msg="Successful endpoint creation" containerID=048e7525f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1782 identity=3379 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c88kd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7dd72ceda5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1099 identity=40659 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dwkh7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7dd72ceda5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1099 identity=40659 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dwkh7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.179 959bea68-edee-421b-8b22-17e83b878ac1 default }" containerID=b5ef47e8af76b997089e6ba549586fd31504cc37540d78e2510dfb9283b4b729 datapathConfiguration="&{false false false false false }" interface=lxc040bf08bbad4 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7j67 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5ef47e8af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 ipv4=10.0.0.179 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7j67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5ef47e8af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.179 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7j67 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5ef47e8af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=20269 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.179 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7j67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5ef47e8af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=20269 ipv4=10.0.0.179 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7j67 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b5ef47e8af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=41 identity=20269 ipv4=10.0.0.179 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7j67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5ef47e8af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=41 identity=20269 ipv4=10.0.0.179 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7j67 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=340 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-181-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00340 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00340 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00340 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00340:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=340 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 d06219d9-2ab4-42dd-89d7-9cb6c6ccb9a2 default }" containerID=4916a76703069fd77e227a7613b1526f5f7234b8d06d3431d6be7cbd551b0783 datapathConfiguration="&{false false false false false }" interface=lxc107ca3a2fabb k8sPodName=monitoring/kube-prometheus-stack-admission-create-8z5wt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4916a76703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1317 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8z5wt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4916a76703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1317 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=31caca7f-7c67-46ec-9263-4565e1d319e7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=31caca7f-7c67-46ec-9263-4565e1d319e7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8z5wt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=31caca7f-7c67-46ec-9263-4565e1d319e7;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=31caca7f-7c67-46ec-9263-4565e1d319e7;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4916a76703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1317 identity=12854 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=31caca7f-7c67-46ec-9263-4565e1d319e7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=31caca7f-7c67-46ec-9263-4565e1d319e7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8z5wt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4916a76703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1317 identity=12854 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8z5wt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4916a76703 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1317 identity=12854 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8z5wt subsys=endpoint level=info msg="Successful endpoint creation" containerID=4916a76703 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1317 identity=12854 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8z5wt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4916a76703 endpointID=1317 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-8z5wt subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=31caca7f-7c67-46ec-9263-4565e1d319e7 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=31caca7f-7c67-46ec-9263-4565e1d319e7 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=4916a76703 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1317 identity=12854 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8z5wt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 84c8817b-0831-4e90-8823-46b609e49db2 default }" containerID=9c4cdb7ed1e7d59bfd0e4cc73a67d16d1cd5403197b0afee196945851c58e199 datapathConfiguration="&{false false false false false }" interface=lxccc0bc2946468 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5kxtc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c4cdb7ed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5kxtc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c4cdb7ed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5kxtc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c4cdb7ed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=12882 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5kxtc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c4cdb7ed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=12882 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5kxtc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 12a98364-703b-493d-9973-b5a7ab60c830 default }" containerID=87f0ed56c5ba4d70acc34b8c439d97e3fb466a00eea261d2d1ad2c6009e82ab5 datapathConfiguration="&{false false false false false }" interface=lxcadf64682ee11 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h2854 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87f0ed56c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h2854 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87f0ed56c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h2854 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87f0ed56c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=6446 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h2854 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87f0ed56c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=6446 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h2854 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c4cdb7ed1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=174 identity=12882 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5kxtc subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c4cdb7ed1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=174 identity=12882 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5kxtc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=87f0ed56c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=35 identity=6446 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h2854 subsys=endpoint level=info msg="Successful endpoint creation" containerID=87f0ed56c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=6446 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h2854 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.52 1b791fd7-20db-4273-818e-fac5408d40bc default }" containerID=7d7f69b87a1a1114835b9a3e8b2c168ffac8c586a780ec5e7e2d9a16c2941499 datapathConfiguration="&{false false false false false }" interface=lxc096756f26387 k8sPodName=monitoring/kube-prometheus-stack-grafana-d68b4f987-gczc5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d7f69b87a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d68b4f987-gczc5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d7f69b87a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d68b4f987-gczc5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d7f69b87a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identity=22468 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d68b4f987-gczc5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d7f69b87a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identity=22468 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d68b4f987-gczc5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d7f69b87a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1398 identity=22468 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d68b4f987-gczc5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d7f69b87a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1398 identity=22468 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d68b4f987-gczc5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.229 a4477856-20d6-4da7-a283-53d277856cd3 default }" containerID=41985ac0af83d7b1cbe8fcd7c84adff852d2719691bb5561cdda79624bac74d1 datapathConfiguration="&{false false false false false }" interface=lxc90d86c4f9696 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t98hl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41985ac0af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t98hl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41985ac0af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=67d8fa95-0425-4ebb-9e79-b3df50f9c27b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=67d8fa95-0425-4ebb-9e79-b3df50f9c27b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t98hl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=67d8fa95-0425-4ebb-9e79-b3df50f9c27b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=67d8fa95-0425-4ebb-9e79-b3df50f9c27b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41985ac0af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=13913 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=67d8fa95-0425-4ebb-9e79-b3df50f9c27b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=67d8fa95-0425-4ebb-9e79-b3df50f9c27b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t98hl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41985ac0af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=13913 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t98hl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41985ac0af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=743 identity=13913 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t98hl subsys=endpoint level=info msg="Successful endpoint creation" containerID=41985ac0af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=743 identity=13913 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t98hl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41985ac0af endpointID=743 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-t98hl subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=67d8fa95-0425-4ebb-9e79-b3df50f9c27b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=67d8fa95-0425-4ebb-9e79-b3df50f9c27b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=41985ac0af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=743 identity=13913 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t98hl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 3a50a803-75df-488b-8874-67004f7120f9 default }" containerID=96b2190fddc3c488ebaab1989f78863bb2b0d3ea9fe0b132e06d4515a3d04989 datapathConfiguration="&{false false false false false }" interface=lxc4b43b30e270e k8sPodName=local-path-storage/helper-pod-create-pvc-2c5c127a-12bf-4ec9-bfd0-6a4ccbce41c5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96b2190fdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c5c127a-12bf-4ec9-bfd0-6a4ccbce41c5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96b2190fdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c5c127a-12bf-4ec9-bfd0-6a4ccbce41c5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96b2190fdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 identity=25051 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c5c127a-12bf-4ec9-bfd0-6a4ccbce41c5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96b2190fdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 identity=25051 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c5c127a-12bf-4ec9-bfd0-6a4ccbce41c5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96b2190fdd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=591 identity=25051 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c5c127a-12bf-4ec9-bfd0-6a4ccbce41c5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96b2190fdd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=591 identity=25051 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c5c127a-12bf-4ec9-bfd0-6a4ccbce41c5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.164 281079cd-3ecc-4b0d-a23a-5d89679a5b41 default }" containerID=aa2f6650a7c9a1cd19b21be476967cded204742abfa9006492309d26adc51a1d datapathConfiguration="&{false false false false false }" interface=lxcb8ea5b891eaf k8sPodName=local-path-storage/helper-pod-create-pvc-b04309e3-2e60-4406-bff8-d083dcf4c1fd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa2f6650a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b04309e3-2e60-4406-bff8-d083dcf4c1fd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa2f6650a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b04309e3-2e60-4406-bff8-d083dcf4c1fd subsys=endpoint level=info msg="Identity of endpoint changed" containerID=aa2f6650a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identity=25051 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b04309e3-2e60-4406-bff8-d083dcf4c1fd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa2f6650a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identity=25051 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b04309e3-2e60-4406-bff8-d083dcf4c1fd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa2f6650a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=119 identity=25051 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b04309e3-2e60-4406-bff8-d083dcf4c1fd subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa2f6650a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=119 identity=25051 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b04309e3-2e60-4406-bff8-d083dcf4c1fd subsys=daemon level=info msg="Delete endpoint request" containerID=96b2190fdd endpointID=591 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2c5c127a-12bf-4ec9-bfd0-6a4ccbce41c5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=96b2190fdd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=591 identity=25051 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c5c127a-12bf-4ec9-bfd0-6a4ccbce41c5 subsys=endpoint level=info msg="Delete endpoint request" containerID=aa2f6650a7 endpointID=119 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b04309e3-2e60-4406-bff8-d083dcf4c1fd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=aa2f6650a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=119 identity=25051 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b04309e3-2e60-4406-bff8-d083dcf4c1fd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 25568318-a1db-498d-b556-198ae3b14b20 default }" containerID=758613393a10c124b8f8d273825cda61705de6f4552f709e7170093f7154d86c datapathConfiguration="&{false false false false false }" interface=lxc0dd7b654d2b4 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=758613393a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=758613393a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=758613393a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=7415 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=758613393a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=7415 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=758613393a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=476 identity=7415 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=758613393a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=476 identity=7415 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.23 58f972d8-7c2f-4ae0-99e9-c1a68a92d2d2 default }" containerID=d917a741814f513ab3f1ac8942b084a35198b36e0d318a7b196f62b6b8f0e42d datapathConfiguration="&{false false false false false }" interface=lxc9162984b4f43 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d917a74181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d917a74181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d917a74181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identity=13551 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d917a74181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identity=13551 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d917a74181 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1466 identity=13551 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d917a74181 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1466 identity=13551 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.80 b5df8f30-59be-44aa-bfde-17d6d590e8e1 default }" containerID=dbdbf6bc571012f265d72d57992390ea535dcc5401561804a2951ef5d00362cb datapathConfiguration="&{false false false false false }" interface=lxc33c1ebad620b k8sPodName=monitoring/loki-gateway-cf54cb88c-b5rrs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbdbf6bc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-b5rrs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbdbf6bc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-b5rrs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbdbf6bc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identity=51142 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-b5rrs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbdbf6bc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identity=51142 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-b5rrs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbdbf6bc57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=863 identity=51142 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-b5rrs subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbdbf6bc57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=863 identity=51142 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-b5rrs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.43 d75747c9-b63c-4a75-89b0-ffcbb04e81c2 default }" containerID=2a8a75a647003f032f180cea17fe29efd2284ec98061fbb7aa8b12870dec42fd datapathConfiguration="&{false false false false false }" interface=lxc8e5fa318084c k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.171 af577463-db6d-4683-93a8-00af99f1048a default }" containerID=d6eca2253c29f08667647bcd9d0b7a46910f5cfad181f2910600594dcaba1058 datapathConfiguration="&{false false false false false }" interface=lxc28f470ae83b2 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6eca2253c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=2a8a75a647 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6eca2253c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=2a8a75a647 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6eca2253c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=10928 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6eca2253c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=10928 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a8a75a647 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identity=47764 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a8a75a647 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identity=47764 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6eca2253c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=689 identity=10928 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6eca2253c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=689 identity=10928 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2a8a75a647 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=190 identity=47764 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a8a75a647 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=190 identity=47764 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.167 96012a45-6826-471e-b927-b131d046938e default }" containerID=e62141cb24be258a7e4e126378c47987096eb750ffb73b96a4bf1bb6896fb6bc datapathConfiguration="&{false false false false false }" interface=lxce801dac1cf60 k8sPodName=local-path-storage/helper-pod-create-pvc-4f24a612-2e2a-43cd-8f7d-12d96667fd39 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e62141cb24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f24a612-2e2a-43cd-8f7d-12d96667fd39 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e62141cb24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f24a612-2e2a-43cd-8f7d-12d96667fd39 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e62141cb24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=25051 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f24a612-2e2a-43cd-8f7d-12d96667fd39 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e62141cb24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=25051 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f24a612-2e2a-43cd-8f7d-12d96667fd39 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e62141cb24 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1868 identity=25051 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f24a612-2e2a-43cd-8f7d-12d96667fd39 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e62141cb24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1868 identity=25051 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f24a612-2e2a-43cd-8f7d-12d96667fd39 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.251 d892d9c6-9de2-4e95-a50c-ebca914296ad default }" containerID=9ca8b0f5e73c55b2db114c150793cc88bc6df622db81a6b84b60c723c91eeaf3 datapathConfiguration="&{false false false false false }" interface=lxcbd8ba9e9f91f k8sPodName=monitoring/vector-hdjd5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ca8b0f5e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/vector-hdjd5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ca8b0f5e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/vector-hdjd5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ca8b0f5e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identity=52294 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/vector-hdjd5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ca8b0f5e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identity=52294 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/vector-hdjd5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ca8b0f5e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=579 identity=52294 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/vector-hdjd5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ca8b0f5e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=579 identity=52294 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/vector-hdjd5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e62141cb24 endpointID=1868 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4f24a612-2e2a-43cd-8f7d-12d96667fd39 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e62141cb24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1868 identity=25051 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f24a612-2e2a-43cd-8f7d-12d96667fd39 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 f2ed4dd1-f897-437f-97f8-c4b4de69e851 default }" containerID=f8d5b1da1ae9e3ac4cf06f16a2b54cc27cb8669796fe63c191d440f175407abd datapathConfiguration="&{false false false false false }" interface=lxcd5dc0d715ee0 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8d5b1da1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8d5b1da1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f8d5b1da1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8d5b1da1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identity=2414 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8d5b1da1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identity=2414 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8d5b1da1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1882 identity=2414 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8d5b1da1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1882 identity=2414 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.178 f6ff2139-8ea4-4cfe-b8cc-46fc1d60c515 default }" containerID=2142955451f41c8187b4362223aadeaa17dc9b5defdabd94a9c10bbd31e7e904 datapathConfiguration="&{false false false false false }" interface=lxcf6e0ea64dc16 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vm99l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2142955451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vm99l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2142955451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vm99l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2142955451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=43578 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vm99l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2142955451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=43578 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vm99l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2142955451 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=742 identity=43578 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vm99l subsys=endpoint level=info msg="Successful endpoint creation" containerID=2142955451 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=742 identity=43578 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vm99l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 f86fe91e-9af6-44b0-a1a0-43deea6b5c7c default }" containerID=ff5191e8133b46ec57cd512846a8ac7e6a67413242fc60f7d82896a5a6a21eaa datapathConfiguration="&{false false false false false }" interface=lxcfc5c5ed8e66e k8sPodName=openstack/memcached-memcached-6479589586-tmn2g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff5191e813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2748 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tmn2g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff5191e813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2748 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tmn2g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff5191e813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2748 identity=15867 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tmn2g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff5191e813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2748 identity=15867 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tmn2g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ff5191e813 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2748 identity=15867 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tmn2g subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff5191e813 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2748 identity=15867 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tmn2g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 c3efbde0-c18f-47d5-b8e4-7370ff9a7f17 default }" containerID=a1b56ff36dd444ab22dcee4189f4c27813b69344af737082d198fd84c8281e4b datapathConfiguration="&{false false false false false }" interface=lxc1fb31f0720f6 k8sPodName=local-path-storage/helper-pod-create-pvc-f1fdc29c-c5a0-48f7-b3a8-6cc5a931d83b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1b56ff36d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1fdc29c-c5a0-48f7-b3a8-6cc5a931d83b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1b56ff36d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1fdc29c-c5a0-48f7-b3a8-6cc5a931d83b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1b56ff36d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identity=25051 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1fdc29c-c5a0-48f7-b3a8-6cc5a931d83b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1b56ff36d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identity=25051 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1fdc29c-c5a0-48f7-b3a8-6cc5a931d83b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1b56ff36d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2330 identity=25051 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1fdc29c-c5a0-48f7-b3a8-6cc5a931d83b subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1b56ff36d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2330 identity=25051 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1fdc29c-c5a0-48f7-b3a8-6cc5a931d83b subsys=daemon level=info msg="Delete endpoint request" containerID=a1b56ff36d endpointID=2330 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f1fdc29c-c5a0-48f7-b3a8-6cc5a931d83b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a1b56ff36d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2330 identity=25051 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1fdc29c-c5a0-48f7-b3a8-6cc5a931d83b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 d40efb6c-9999-42cc-ab12-fbbbcd6ae37c default }" containerID=9aeaa26d97121ac777bc0f060c04c2a0fb59dd397e7451d083d82a2511de2e7d datapathConfiguration="&{false false false false false }" interface=lxc88c1d252feeb k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9aeaa26d97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2586 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9aeaa26d97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2586 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9aeaa26d97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2586 identity=19473 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9aeaa26d97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2586 identity=19473 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9aeaa26d97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2586 identity=19473 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9aeaa26d97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2586 identity=19473 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 b2ba6002-b896-4d0a-bcce-27ba0942a188 default }" containerID=7441822ea575b72dc69c7a384403ad053d2e93043eaaac95eb179ace0addd5ef datapathConfiguration="&{false false false false false }" interface=lxc9ad40124acc8 k8sPodName=openstack/keystone-api-696dd76867-pn2m4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7441822ea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2042 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-696dd76867-pn2m4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7441822ea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2042 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-696dd76867-pn2m4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7441822ea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2042 identity=53619 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-696dd76867-pn2m4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7441822ea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2042 identity=53619 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-696dd76867-pn2m4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 9fa9475f-1847-4594-bab8-1de91affe63a default }" containerID=0026c687876c35a300c8681536b5178789a77b161c7dfb4382660137d6bea7f2 datapathConfiguration="&{false false false false false }" interface=lxc27a9e8a17335 k8sPodName=openstack/keystone-credential-setup-pvnjp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0026c68787 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-credential-setup-pvnjp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0026c68787 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7d709baf-5243-4780-8c07-a5422ce8a753,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=7d709baf-5243-4780-8c07-a5422ce8a753,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-credential-setup-pvnjp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7d709baf-5243-4780-8c07-a5422ce8a753;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=7d709baf-5243-4780-8c07-a5422ce8a753;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0026c68787 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 identity=2618 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7d709baf-5243-4780-8c07-a5422ce8a753,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=7d709baf-5243-4780-8c07-a5422ce8a753,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-credential-setup-pvnjp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0026c68787 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 identity=2618 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-credential-setup-pvnjp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7441822ea5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2042 identity=53619 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-696dd76867-pn2m4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7441822ea5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2042 identity=53619 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-696dd76867-pn2m4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0026c68787 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=703 identity=2618 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-credential-setup-pvnjp subsys=endpoint level=info msg="Successful endpoint creation" containerID=0026c68787 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=703 identity=2618 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-credential-setup-pvnjp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0026c68787 endpointID=703 k8sNamespace=openstack k8sPodName=keystone-credential-setup-pvnjp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7d709baf-5243-4780-8c07-a5422ce8a753 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=7d709baf-5243-4780-8c07-a5422ce8a753 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0026c68787 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=703 identity=2618 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-credential-setup-pvnjp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 72294d98-7c95-4454-94f3-d7684d3f71b2 default }" containerID=907f99e62cd1b3dfbb093e9efda19bfb8e80f1bd0adefb5b24c38de2ad1fe937 datapathConfiguration="&{false false false false false }" interface=lxc8f819198cd7e k8sPodName=openstack/keystone-db-init-c89zd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=907f99e62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3149 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-init-c89zd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=907f99e62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3149 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7d41c4b1-caf3-4b47-a41c-64286e4154ea,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7d41c4b1-caf3-4b47-a41c-64286e4154ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-init-c89zd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7d41c4b1-caf3-4b47-a41c-64286e4154ea;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=7d41c4b1-caf3-4b47-a41c-64286e4154ea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=907f99e62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3149 identity=19541 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7d41c4b1-caf3-4b47-a41c-64286e4154ea,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7d41c4b1-caf3-4b47-a41c-64286e4154ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-init-c89zd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=907f99e62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3149 identity=19541 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-init-c89zd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=907f99e62c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3149 identity=19541 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-init-c89zd subsys=endpoint level=info msg="Successful endpoint creation" containerID=907f99e62c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3149 identity=19541 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-init-c89zd subsys=daemon level=info msg="Delete endpoint request" containerID=907f99e62c endpointID=3149 k8sNamespace=openstack k8sPodName=keystone-db-init-c89zd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7d41c4b1-caf3-4b47-a41c-64286e4154ea k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=7d41c4b1-caf3-4b47-a41c-64286e4154ea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=907f99e62c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3149 identity=19541 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-init-c89zd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 4176d837-4469-4164-a4ec-e49ed5b2a0de default }" containerID=a30a3d50f61c9152b0dbefc930aab442113fcaee073375fb1d6d8b47aae5bfc1 datapathConfiguration="&{false false false false false }" interface=lxc903f1b71e7b4 k8sPodName=openstack/keystone-fernet-setup-pf4hc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a30a3d50f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-pf4hc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a30a3d50f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f21a0327-9e01-43b2-a122-747f26edffe3,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f21a0327-9e01-43b2-a122-747f26edffe3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-pf4hc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f21a0327-9e01-43b2-a122-747f26edffe3;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=f21a0327-9e01-43b2-a122-747f26edffe3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a30a3d50f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identity=8790 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f21a0327-9e01-43b2-a122-747f26edffe3,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f21a0327-9e01-43b2-a122-747f26edffe3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-pf4hc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a30a3d50f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identity=8790 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-pf4hc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a30a3d50f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1871 identity=8790 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-pf4hc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a30a3d50f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1871 identity=8790 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-pf4hc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a30a3d50f6 endpointID=1871 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-pf4hc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f21a0327-9e01-43b2-a122-747f26edffe3 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=f21a0327-9e01-43b2-a122-747f26edffe3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a30a3d50f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1871 identity=8790 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-pf4hc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 654faaa5-d06a-461c-b2d1-0634e8c33d18 default }" containerID=0cc9a2dc5a4d973d9f7752ab4127bd6141165e28633a2758c4ddd2966c64e2b4 datapathConfiguration="&{false false false false false }" interface=lxc54c4c87c2acc k8sPodName=openstack/keystone-db-sync-t5mrv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cc9a2dc5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-sync-t5mrv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cc9a2dc5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e03ee157-835c-471a-a98d-d55fe946567b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=e03ee157-835c-471a-a98d-d55fe946567b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-sync-t5mrv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e03ee157-835c-471a-a98d-d55fe946567b;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=e03ee157-835c-471a-a98d-d55fe946567b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cc9a2dc5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identity=53039 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e03ee157-835c-471a-a98d-d55fe946567b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=e03ee157-835c-471a-a98d-d55fe946567b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-sync-t5mrv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0cc9a2dc5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identity=53039 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-sync-t5mrv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0cc9a2dc5a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=532 identity=53039 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-sync-t5mrv subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cc9a2dc5a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=532 identity=53039 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-sync-t5mrv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0cc9a2dc5a endpointID=532 k8sNamespace=openstack k8sPodName=keystone-db-sync-t5mrv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e03ee157-835c-471a-a98d-d55fe946567b k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=e03ee157-835c-471a-a98d-d55fe946567b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0cc9a2dc5a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=532 identity=53039 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-sync-t5mrv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 5fa157a7-aa8a-47fd-8654-2b96afa5d62c default }" containerID=b800b441c2578e14ba7e129d8aded694b1e0836b500e2e9a43dd70c6f227a5f8 datapathConfiguration="&{false false false false false }" interface=lxcb6a2e0ede57a k8sPodName=openstack/keystone-rabbit-init-v8w48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b800b441c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-rabbit-init-v8w48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b800b441c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e239e79f-1f44-403b-b08d-a4b4ceef8626,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e239e79f-1f44-403b-b08d-a4b4ceef8626,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-rabbit-init-v8w48 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b800b441c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-rabbit-init-v8w48 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e239e79f-1f44-403b-b08d-a4b4ceef8626;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e239e79f-1f44-403b-b08d-a4b4ceef8626;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b800b441c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identity=23794 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e239e79f-1f44-403b-b08d-a4b4ceef8626,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e239e79f-1f44-403b-b08d-a4b4ceef8626,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-rabbit-init-v8w48 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b800b441c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identity=23794 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-rabbit-init-v8w48 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b800b441c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1694 identity=23794 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-rabbit-init-v8w48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b800b441c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1694 identity=23794 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-rabbit-init-v8w48 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b800b441c2 endpointID=1694 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-v8w48 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e239e79f-1f44-403b-b08d-a4b4ceef8626 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e239e79f-1f44-403b-b08d-a4b4ceef8626 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b800b441c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1694 identity=23794 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-rabbit-init-v8w48 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 b13fb137-ea71-4c6b-bef9-31cfdf05c803 default }" containerID=aa5dfe31701e28862f32cba39ea3316d16bd05fd8c0bc69e8f6ec0f4be3c1ea5 datapathConfiguration="&{false false false false false }" interface=lxcca0b0c807edd k8sPodName=openstack/keystone-domain-manage-jb6v5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa5dfe3170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=446 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-domain-manage-jb6v5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa5dfe3170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=446 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1dcf8c6f-48e1-472c-9864-825db4ff6b42,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=1dcf8c6f-48e1-472c-9864-825db4ff6b42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-domain-manage-jb6v5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1dcf8c6f-48e1-472c-9864-825db4ff6b42;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=1dcf8c6f-48e1-472c-9864-825db4ff6b42;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa5dfe3170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=446 identity=2380 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1dcf8c6f-48e1-472c-9864-825db4ff6b42,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=1dcf8c6f-48e1-472c-9864-825db4ff6b42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-domain-manage-jb6v5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa5dfe3170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=446 identity=2380 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-domain-manage-jb6v5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aa5dfe3170 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=446 identity=2380 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-domain-manage-jb6v5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa5dfe3170 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=446 identity=2380 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-domain-manage-jb6v5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa5dfe3170 endpointID=446 k8sNamespace=openstack k8sPodName=keystone-domain-manage-jb6v5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1dcf8c6f-48e1-472c-9864-825db4ff6b42 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=1dcf8c6f-48e1-472c-9864-825db4ff6b42 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=aa5dfe3170 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=446 identity=2380 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-domain-manage-jb6v5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 46329f12-db6a-42f6-9cb3-c60433aa695f default }" containerID=26e59ebbc53f7d047ca9beb079ffe720d24766be828eb3c0b8985f0dacd02c37 datapathConfiguration="&{false false false false false }" interface=lxce8f77912e9f9 k8sPodName=openstack/keystone-bootstrap-kbrzh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26e59ebbc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-bootstrap-kbrzh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26e59ebbc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=126a035a-ceb0-4e8b-bdb9-86297220b6da,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=126a035a-ceb0-4e8b-bdb9-86297220b6da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-bootstrap-kbrzh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=126a035a-ceb0-4e8b-bdb9-86297220b6da;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=126a035a-ceb0-4e8b-bdb9-86297220b6da;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26e59ebbc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 identity=33230 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=126a035a-ceb0-4e8b-bdb9-86297220b6da,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=126a035a-ceb0-4e8b-bdb9-86297220b6da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-bootstrap-kbrzh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=26e59ebbc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 identity=33230 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-bootstrap-kbrzh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26e59ebbc5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2045 identity=33230 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-bootstrap-kbrzh subsys=endpoint level=info msg="Successful endpoint creation" containerID=26e59ebbc5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2045 identity=33230 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-bootstrap-kbrzh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=26e59ebbc5 endpointID=2045 k8sNamespace=openstack k8sPodName=keystone-bootstrap-kbrzh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=126a035a-ceb0-4e8b-bdb9-86297220b6da k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=126a035a-ceb0-4e8b-bdb9-86297220b6da k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=26e59ebbc5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2045 identity=33230 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-bootstrap-kbrzh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 84dca07d-5f67-4901-8dd2-07aa3e7b61e9 default }" containerID=a1c0e54288581a12b2f13fd7fd9ed7f04fa800e80233319f4f427510c0a4ca9f datapathConfiguration="&{false false false false false }" interface=lxc6e2db152784f k8sPodName=local-path-storage/helper-pod-create-pvc-83961c9b-4d51-4d55-aaeb-a65239a03bb5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1c0e54288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2962 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83961c9b-4d51-4d55-aaeb-a65239a03bb5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1c0e54288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2962 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83961c9b-4d51-4d55-aaeb-a65239a03bb5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1c0e54288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2962 identity=25051 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83961c9b-4d51-4d55-aaeb-a65239a03bb5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1c0e54288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2962 identity=25051 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83961c9b-4d51-4d55-aaeb-a65239a03bb5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1c0e54288 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2962 identity=25051 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83961c9b-4d51-4d55-aaeb-a65239a03bb5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1c0e54288 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2962 identity=25051 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83961c9b-4d51-4d55-aaeb-a65239a03bb5 subsys=daemon level=info msg="Delete endpoint request" containerID=a1c0e54288 endpointID=2962 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-83961c9b-4d51-4d55-aaeb-a65239a03bb5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a1c0e54288 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2962 identity=25051 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83961c9b-4d51-4d55-aaeb-a65239a03bb5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 809f0723-0ace-4e4e-940e-735f1957921a default }" containerID=3b7d46b56acaeb8e0c9be92a48036116248bbcc28e390d1eb5caa5340f72b774 datapathConfiguration="&{false false false false false }" interface=lxcd0bd8516530f k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b7d46b56a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b7d46b56a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b7d46b56a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identity=17337 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3b7d46b56a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identity=17337 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b7d46b56a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1594 identity=17337 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b7d46b56a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1594 identity=17337 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.034459669674138 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.96 4f9e154a-c4f2-4ff3-8121-2c6dea1cffc1 default }" containerID=e359533f422fbc27e4e11392397940a033c468b99607fd7ceda22b85de093a9a datapathConfiguration="&{false false false false false }" interface=lxc840c37bc5ebb k8sPodName=openstack/barbican-api-5db444bb77-8frb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e359533f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-api-5db444bb77-8frb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e359533f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-api-5db444bb77-8frb6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e359533f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-api-5db444bb77-8frb6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e359533f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identity=1356 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-api-5db444bb77-8frb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e359533f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identity=1356 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-api-5db444bb77-8frb6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 70f84420-89a6-46c6-bca4-af9dd185f5d9 default }" containerID=590cc3f37b66949caa8bdb302f530e0948a6edf1ad6990eda23e11afb0d05f48 datapathConfiguration="&{false false false false false }" interface=lxc0aa0ac2de129 k8sPodName=openstack/barbican-db-init-f45p2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=590cc3f37b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-db-init-f45p2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=590cc3f37b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=243c116c-f1db-4a41-b122-8e6530b4fbbf,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=243c116c-f1db-4a41-b122-8e6530b4fbbf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-db-init-f45p2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=243c116c-f1db-4a41-b122-8e6530b4fbbf;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=243c116c-f1db-4a41-b122-8e6530b4fbbf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=590cc3f37b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identity=11413 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=243c116c-f1db-4a41-b122-8e6530b4fbbf,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=243c116c-f1db-4a41-b122-8e6530b4fbbf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-db-init-f45p2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=590cc3f37b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identity=11413 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-db-init-f45p2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e359533f42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2856 identity=1356 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-api-5db444bb77-8frb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e359533f42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2856 identity=1356 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-api-5db444bb77-8frb6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=590cc3f37b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=734 identity=11413 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-db-init-f45p2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=590cc3f37b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=734 identity=11413 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-db-init-f45p2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=590cc3f37b endpointID=734 k8sNamespace=openstack k8sPodName=barbican-db-init-f45p2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=243c116c-f1db-4a41-b122-8e6530b4fbbf k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=243c116c-f1db-4a41-b122-8e6530b4fbbf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=590cc3f37b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=734 identity=11413 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-db-init-f45p2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 589b7631-fffa-40c1-b780-a8b46e95bb19 default }" containerID=c460eb7db8157821605ba43539c926d12099f0ba50a2719159bdd73937ebfd0e datapathConfiguration="&{false false false false false }" interface=lxc4d81bba24ea0 k8sPodName=openstack/barbican-db-sync-pq824 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c460eb7db8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2636 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-sync-pq824 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c460eb7db8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2636 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b440db9a-df38-4726-af09-be0e709845e4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b440db9a-df38-4726-af09-be0e709845e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-sync-pq824 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b440db9a-df38-4726-af09-be0e709845e4;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=b440db9a-df38-4726-af09-be0e709845e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c460eb7db8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2636 identity=22484 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b440db9a-df38-4726-af09-be0e709845e4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b440db9a-df38-4726-af09-be0e709845e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-sync-pq824 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c460eb7db8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2636 identity=22484 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-sync-pq824 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c460eb7db8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2636 identity=22484 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-sync-pq824 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c460eb7db8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2636 identity=22484 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-sync-pq824 subsys=daemon level=info msg="Delete endpoint request" containerID=c460eb7db8 endpointID=2636 k8sNamespace=openstack k8sPodName=barbican-db-sync-pq824 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b440db9a-df38-4726-af09-be0e709845e4 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=b440db9a-df38-4726-af09-be0e709845e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c460eb7db8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2636 identity=22484 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-sync-pq824 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 7aef20f8-bfeb-40b1-863d-af51b3c1dde6 default }" containerID=77b97a97c7760e2069667922e7403d7ed5758eab801cfad52b10cb15b4f5e5ad datapathConfiguration="&{false false false false false }" interface=lxc82e814483885 k8sPodName=openstack/barbican-rabbit-init-s6ksz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77b97a97c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-s6ksz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77b97a97c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=13492b97-3ebc-4ff9-8563-e66f2f59fb09,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=13492b97-3ebc-4ff9-8563-e66f2f59fb09,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-s6ksz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=77b97a97c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-s6ksz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=13492b97-3ebc-4ff9-8563-e66f2f59fb09;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=13492b97-3ebc-4ff9-8563-e66f2f59fb09;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77b97a97c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identity=856 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=13492b97-3ebc-4ff9-8563-e66f2f59fb09,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=13492b97-3ebc-4ff9-8563-e66f2f59fb09,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-s6ksz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77b97a97c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identity=856 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-s6ksz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77b97a97c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2945 identity=856 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-s6ksz subsys=endpoint level=info msg="Successful endpoint creation" containerID=77b97a97c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2945 identity=856 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-s6ksz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=77b97a97c7 endpointID=2945 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-s6ksz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=13492b97-3ebc-4ff9-8563-e66f2f59fb09 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=13492b97-3ebc-4ff9-8563-e66f2f59fb09 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=77b97a97c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2945 identity=856 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-rabbit-init-s6ksz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 f4e7979b-5402-4ed6-b549-a0a592347a1d default }" containerID=7c0c392722d7d0d190480dc3a9bdd05f3930bc1b35c3b2ee9b4edf5f8e8a8161 datapathConfiguration="&{false false false false false }" interface=lxca5c1133397b6 k8sPodName=openstack/barbican-ks-service-n55zm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c0c392722 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-n55zm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c0c392722 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e4c768ae-de7c-40a7-aeab-9f78c2e4b8a6,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=e4c768ae-de7c-40a7-aeab-9f78c2e4b8a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-n55zm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7c0c392722 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-n55zm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e4c768ae-de7c-40a7-aeab-9f78c2e4b8a6;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=e4c768ae-de7c-40a7-aeab-9f78c2e4b8a6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c0c392722 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 identity=28607 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e4c768ae-de7c-40a7-aeab-9f78c2e4b8a6,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=e4c768ae-de7c-40a7-aeab-9f78c2e4b8a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-n55zm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c0c392722 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 identity=28607 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-n55zm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c0c392722 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1180 identity=28607 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-n55zm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c0c392722 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1180 identity=28607 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-n55zm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c0c392722 endpointID=1180 k8sNamespace=openstack k8sPodName=barbican-ks-service-n55zm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e4c768ae-de7c-40a7-aeab-9f78c2e4b8a6 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=e4c768ae-de7c-40a7-aeab-9f78c2e4b8a6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7c0c392722 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1180 identity=28607 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-service-n55zm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 14a4427e-6dbb-4398-8d15-61958b7a21aa default }" containerID=5c630b46060ce0aee569442682e4b671dde018f76e8a2bce418184f3e0bfca47 datapathConfiguration="&{false false false false false }" interface=lxc7ed2a9a4a0da k8sPodName=openstack/barbican-ks-endpoints-6klg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c630b4606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6klg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c630b4606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=da88b982-a167-4cf4-a849-5ee749777244,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=da88b982-a167-4cf4-a849-5ee749777244,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6klg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=da88b982-a167-4cf4-a849-5ee749777244;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=da88b982-a167-4cf4-a849-5ee749777244;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5c630b4606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=315 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=da88b982-a167-4cf4-a849-5ee749777244,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=da88b982-a167-4cf4-a849-5ee749777244,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6klg2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c630b4606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=315 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6klg2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c630b4606 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3235 identity=315 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6klg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c630b4606 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3235 identity=315 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6klg2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c630b4606 endpointID=3235 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-6klg2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=da88b982-a167-4cf4-a849-5ee749777244 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=da88b982-a167-4cf4-a849-5ee749777244 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5c630b4606 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3235 identity=315 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6klg2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 d28a3061-d82d-4177-85a7-f2b4cc1f1a05 default }" containerID=e0f3051bfce881542442f18aaac6f9b3655cb59c806d47bf789115d024d044a2 datapathConfiguration="&{false false false false false }" interface=lxc25da82f0da9d k8sPodName=openstack/barbican-ks-user-swpww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0f3051bfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-swpww subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0f3051bfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=17c9e3ef-63e3-4fa8-89a9-9dab9045109e,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=17c9e3ef-63e3-4fa8-89a9-9dab9045109e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-swpww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=17c9e3ef-63e3-4fa8-89a9-9dab9045109e;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=17c9e3ef-63e3-4fa8-89a9-9dab9045109e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0f3051bfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=41882 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=17c9e3ef-63e3-4fa8-89a9-9dab9045109e,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=17c9e3ef-63e3-4fa8-89a9-9dab9045109e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-swpww oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e0f3051bfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=41882 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-swpww subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0f3051bfc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=603 identity=41882 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-swpww subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0f3051bfc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=603 identity=41882 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-swpww subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e0f3051bfc endpointID=603 k8sNamespace=openstack k8sPodName=barbican-ks-user-swpww subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=17c9e3ef-63e3-4fa8-89a9-9dab9045109e k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=17c9e3ef-63e3-4fa8-89a9-9dab9045109e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e0f3051bfc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=603 identity=41882 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-swpww subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.35 4f49ee24-9ec5-4502-979d-cebe8719d43c default }" containerID=5d922de64a7ad2c2ea3335a6d865adb13c9ed234b37cc361777e75581809ff20 datapathConfiguration="&{false false false false false }" interface=lxcbd4975672539 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-h5mhl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d922de64a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 ipv4=10.0.0.35 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-h5mhl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d922de64a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.35 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-h5mhl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5d922de64a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-h5mhl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d922de64a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identity=53989 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.35 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-h5mhl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d922de64a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identity=53989 ipv4=10.0.0.35 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-h5mhl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d922de64a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=477 identity=53989 ipv4=10.0.0.35 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-h5mhl subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d922de64a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=477 identity=53989 ipv4=10.0.0.35 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-h5mhl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.41 b4679ee5-c899-48fe-9054-c997d6e94220 default }" containerID=d818eb57d8fd8b675ca3c82ba2d15609baae0a2649ab99489611d88febde3aae datapathConfiguration="&{false false false false false }" interface=lxc48c8a55a9cbf k8sPodName=openstack/rook-ceph-detect-version-f7p2l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d818eb57d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rook-ceph-detect-version-f7p2l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d818eb57d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=dd5c58c6-f3ed-4616-8edb-e9d0300a4130,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=dd5c58c6-f3ed-4616-8edb-e9d0300a4130,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rook-ceph-detect-version-f7p2l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=dd5c58c6-f3ed-4616-8edb-e9d0300a4130;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=dd5c58c6-f3ed-4616-8edb-e9d0300a4130;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d818eb57d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 identity=1280 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=dd5c58c6-f3ed-4616-8edb-e9d0300a4130,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=dd5c58c6-f3ed-4616-8edb-e9d0300a4130,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rook-ceph-detect-version-f7p2l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d818eb57d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 identity=1280 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rook-ceph-detect-version-f7p2l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d818eb57d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2134 identity=1280 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rook-ceph-detect-version-f7p2l subsys=endpoint level=info msg="Successful endpoint creation" containerID=d818eb57d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2134 identity=1280 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rook-ceph-detect-version-f7p2l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d818eb57d8 endpointID=2134 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-f7p2l subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=dd5c58c6-f3ed-4616-8edb-e9d0300a4130 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=dd5c58c6-f3ed-4616-8edb-e9d0300a4130 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=d818eb57d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2134 identity=1280 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rook-ceph-detect-version-f7p2l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 8d09185d-5104-41bc-bad2-314f5c5b1206 default }" containerID=9ad6bf2b54f3fe340eee010e2675750e6477c93eff5f188eab0b8af92123ebc8 datapathConfiguration="&{false false false false false }" interface=lxc1a666fe9f97e k8sPodName=openstack/ceph-object-controller-detect-version-h5v64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ad6bf2b54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1364 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h5v64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ad6bf2b54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1364 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1fa89c07-bb4a-4155-b34f-98b64a688eb0,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1fa89c07-bb4a-4155-b34f-98b64a688eb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h5v64 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=1fa89c07-bb4a-4155-b34f-98b64a688eb0;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=1fa89c07-bb4a-4155-b34f-98b64a688eb0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9ad6bf2b54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1364 identity=11511 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1fa89c07-bb4a-4155-b34f-98b64a688eb0,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1fa89c07-bb4a-4155-b34f-98b64a688eb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h5v64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ad6bf2b54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1364 identity=11511 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h5v64 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ad6bf2b54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1364 identity=11511 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h5v64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ad6bf2b54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1364 identity=11511 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h5v64 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9ad6bf2b54 endpointID=1364 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-h5v64 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=1fa89c07-bb4a-4155-b34f-98b64a688eb0 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=1fa89c07-bb4a-4155-b34f-98b64a688eb0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=9ad6bf2b54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1364 identity=11511 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h5v64 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 f796e64d-b7d4-4a16-b7fe-9f122e13636d default }" containerID=f63dfc84a47352b308c35270604340cf06ac78e238e8ad7e9a71cb34bf6fbf5c datapathConfiguration="&{false false false false false }" interface=lxcec5f66f73cd3 k8sPodName=local-path-storage/helper-pod-create-pvc-55d7aa25-7f74-4f26-a5ee-29744b1951dd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f63dfc84a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-55d7aa25-7f74-4f26-a5ee-29744b1951dd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f63dfc84a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-55d7aa25-7f74-4f26-a5ee-29744b1951dd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f63dfc84a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=25051 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-55d7aa25-7f74-4f26-a5ee-29744b1951dd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f63dfc84a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=25051 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-55d7aa25-7f74-4f26-a5ee-29744b1951dd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f63dfc84a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=221 identity=25051 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-55d7aa25-7f74-4f26-a5ee-29744b1951dd subsys=endpoint level=info msg="Successful endpoint creation" containerID=f63dfc84a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=221 identity=25051 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-55d7aa25-7f74-4f26-a5ee-29744b1951dd subsys=daemon level=info msg="Delete endpoint request" containerID=f63dfc84a4 endpointID=221 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-55d7aa25-7f74-4f26-a5ee-29744b1951dd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f63dfc84a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=221 identity=25051 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-55d7aa25-7f74-4f26-a5ee-29744b1951dd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 277815e9-2ea6-4ddb-89f7-fc22cfe79db8 default }" containerID=9811f97c7a50bec39b0b3f6908158b3ec259e3770ca42122a5414dd7c79b888d datapathConfiguration="&{false false false false false }" interface=lxcb2a9b07aae1d k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9811f97c7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9811f97c7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9811f97c7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9811f97c7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 identity=7260 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9811f97c7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 identity=7260 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9811f97c7a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=749 identity=7260 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9811f97c7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=749 identity=7260 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.143 95a88718-18d4-43e9-91e1-730632744922 default }" containerID=bd09b50169c620d70e537048158cb5a77552263a02748e7bf10bec92017729f2 datapathConfiguration="&{false false false false false }" interface=lxcd843db10da14 k8sPodName=openstack/glance-db-init-qzkgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd09b50169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4077 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-db-init-qzkgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd09b50169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4077 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1b1a3ba-0abb-4447-a863-2e758f4e7cc2,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a1b1a3ba-0abb-4447-a863-2e758f4e7cc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-db-init-qzkgg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a1b1a3ba-0abb-4447-a863-2e758f4e7cc2;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=a1b1a3ba-0abb-4447-a863-2e758f4e7cc2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd09b50169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4077 identity=44289 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1b1a3ba-0abb-4447-a863-2e758f4e7cc2,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a1b1a3ba-0abb-4447-a863-2e758f4e7cc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-db-init-qzkgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd09b50169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4077 identity=44289 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-db-init-qzkgg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bd09b50169 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4077 identity=44289 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-db-init-qzkgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd09b50169 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4077 identity=44289 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-db-init-qzkgg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd09b50169 endpointID=4077 k8sNamespace=openstack k8sPodName=glance-db-init-qzkgg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a1b1a3ba-0abb-4447-a863-2e758f4e7cc2 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=a1b1a3ba-0abb-4447-a863-2e758f4e7cc2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bd09b50169 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4077 identity=44289 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-db-init-qzkgg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 6102e791-90d7-4860-a627-0a62ad095b75 default }" containerID=888ebe22fcbdbc49b1d1342d86529d164a85f7bf3c3835ca0f3910fd7675969a datapathConfiguration="&{false false false false false }" interface=lxcfc2bc65ec578 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fj9x4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=888ebe22fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=769 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fj9x4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=888ebe22fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=769 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fj9x4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=888ebe22fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=769 identity=57417 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fj9x4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=888ebe22fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=769 identity=57417 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fj9x4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 4af575ec-72cd-4248-b244-bf4769869a37 default }" containerID=c80ab4db89e819b3d024f50540c42c26c753a6b34523359cc5a78d3707d6893a datapathConfiguration="&{false false false false false }" interface=lxc24ec1d6e447c k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cvccw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c80ab4db89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cvccw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c80ab4db89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cvccw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c80ab4db89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 identity=1458 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cvccw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c80ab4db89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 identity=1458 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cvccw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=888ebe22fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=769 identity=57417 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fj9x4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=888ebe22fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=769 identity=57417 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fj9x4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c80ab4db89 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1659 identity=1458 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cvccw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c80ab4db89 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1659 identity=1458 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cvccw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.146 09d75f4b-070d-4a55-8cfe-597632c8d7e6 default }" containerID=d4447e06d688b3f6bc4a720816cef523b1cf61bbb2880d925ed406bf345144d2 datapathConfiguration="&{false false false false false }" interface=lxc9641bafd4cd8 k8sPodName=openstack/glance-db-sync-dn846 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4447e06d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-db-sync-dn846 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4447e06d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e02c31ec-e307-46b6-b671-7b3a4d8df959,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=e02c31ec-e307-46b6-b671-7b3a4d8df959,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-db-sync-dn846 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e02c31ec-e307-46b6-b671-7b3a4d8df959;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=e02c31ec-e307-46b6-b671-7b3a4d8df959;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4447e06d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identity=34976 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e02c31ec-e307-46b6-b671-7b3a4d8df959,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=e02c31ec-e307-46b6-b671-7b3a4d8df959,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-db-sync-dn846 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4447e06d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identity=34976 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-db-sync-dn846 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4447e06d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1898 identity=34976 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-db-sync-dn846 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4447e06d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1898 identity=34976 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-db-sync-dn846 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d4447e06d6 endpointID=1898 k8sNamespace=openstack k8sPodName=glance-db-sync-dn846 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e02c31ec-e307-46b6-b671-7b3a4d8df959 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=e02c31ec-e307-46b6-b671-7b3a4d8df959 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d4447e06d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1898 identity=34976 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-db-sync-dn846 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 1aa59697-6533-4633-b15d-074f0f72d93a default }" containerID=e5e426da967258a56caeb28a47105d5d5f1ea685d360f8cee3152930957a2c2e datapathConfiguration="&{false false false false false }" interface=lxcbab9cc62d74f k8sPodName=openstack/glance-rabbit-init-jsksr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5e426da96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-rabbit-init-jsksr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5e426da96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eb9e5df5-eec0-433b-b44f-cbef5248bb69,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=eb9e5df5-eec0-433b-b44f-cbef5248bb69,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-rabbit-init-jsksr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=eb9e5df5-eec0-433b-b44f-cbef5248bb69;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=eb9e5df5-eec0-433b-b44f-cbef5248bb69;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5e426da96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identity=24987 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eb9e5df5-eec0-433b-b44f-cbef5248bb69,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=eb9e5df5-eec0-433b-b44f-cbef5248bb69,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-rabbit-init-jsksr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5e426da96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identity=24987 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-rabbit-init-jsksr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e5e426da96 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=733 identity=24987 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-rabbit-init-jsksr subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5e426da96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=733 identity=24987 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-rabbit-init-jsksr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e5e426da96 endpointID=733 k8sNamespace=openstack k8sPodName=glance-rabbit-init-jsksr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=eb9e5df5-eec0-433b-b44f-cbef5248bb69 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=eb9e5df5-eec0-433b-b44f-cbef5248bb69 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e5e426da96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=733 identity=24987 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-rabbit-init-jsksr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 ccf007a7-e9eb-43c3-8427-063663c0b0c2 default }" containerID=a27c576bd0fba570a0818d63aa58258b36b621b3b8d56f6ea9a1593ebc2204f8 datapathConfiguration="&{false false false false false }" interface=lxccfeed00a9d66 k8sPodName=openstack/glance-ks-service-2xl59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a27c576bd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-2xl59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a27c576bd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f29f8881-b996-44c2-802a-7313e4772178,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=f29f8881-b996-44c2-802a-7313e4772178,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-2xl59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f29f8881-b996-44c2-802a-7313e4772178;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=f29f8881-b996-44c2-802a-7313e4772178;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a27c576bd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=37958 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f29f8881-b996-44c2-802a-7313e4772178,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=f29f8881-b996-44c2-802a-7313e4772178,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-2xl59 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a27c576bd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=37958 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-2xl59 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a27c576bd0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=719 identity=37958 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-2xl59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a27c576bd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=719 identity=37958 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-2xl59 subsys=daemon level=info msg="Delete endpoint request" containerID=a27c576bd0 endpointID=719 k8sNamespace=openstack k8sPodName=glance-ks-service-2xl59 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f29f8881-b996-44c2-802a-7313e4772178 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=f29f8881-b996-44c2-802a-7313e4772178 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a27c576bd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=719 identity=37958 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-2xl59 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 da42d52f-f52e-48d4-b6d9-f1e2b737e521 default }" containerID=d12f806e9116fb94420bd4a736339b39c78e6bb0fb43dcb1f8066439241e30fe datapathConfiguration="&{false false false false false }" interface=lxc6de1f833c8ca k8sPodName=openstack/glance-ks-endpoints-6vq2q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d12f806e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-6vq2q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d12f806e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8d6efaef-8462-4293-801a-4823f0f4a817,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8d6efaef-8462-4293-801a-4823f0f4a817,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-6vq2q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d12f806e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-6vq2q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8d6efaef-8462-4293-801a-4823f0f4a817;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=8d6efaef-8462-4293-801a-4823f0f4a817;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d12f806e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=37976 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8d6efaef-8462-4293-801a-4823f0f4a817,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8d6efaef-8462-4293-801a-4823f0f4a817,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-6vq2q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d12f806e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=37976 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-6vq2q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d12f806e91 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1259 identity=37976 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-6vq2q subsys=endpoint level=info msg="Successful endpoint creation" containerID=d12f806e91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1259 identity=37976 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-6vq2q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d12f806e91 endpointID=1259 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-6vq2q subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8d6efaef-8462-4293-801a-4823f0f4a817 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=8d6efaef-8462-4293-801a-4823f0f4a817 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d12f806e91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1259 identity=37976 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-6vq2q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 1a63770e-5fe3-4b38-9b4f-3de728d2c519 default }" containerID=8651f0a02415806d7701df2adadcd57b1cf6f677afb5e7ff7a48a6e1750bf09f datapathConfiguration="&{false false false false false }" interface=lxcc12832a337cb k8sPodName=openstack/glance-ks-user-b5flw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8651f0a024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1065 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-user-b5flw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8651f0a024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1065 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fdaf3050-f920-4418-a6a7-c78938681acb,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=fdaf3050-f920-4418-a6a7-c78938681acb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-user-b5flw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fdaf3050-f920-4418-a6a7-c78938681acb;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=fdaf3050-f920-4418-a6a7-c78938681acb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8651f0a024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1065 identity=49853 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fdaf3050-f920-4418-a6a7-c78938681acb,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=fdaf3050-f920-4418-a6a7-c78938681acb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-user-b5flw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8651f0a024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1065 identity=49853 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-user-b5flw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8651f0a024 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1065 identity=49853 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-user-b5flw subsys=endpoint level=info msg="Successful endpoint creation" containerID=8651f0a024 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1065 identity=49853 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-user-b5flw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8651f0a024 endpointID=1065 k8sNamespace=openstack k8sPodName=glance-ks-user-b5flw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fdaf3050-f920-4418-a6a7-c78938681acb k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=fdaf3050-f920-4418-a6a7-c78938681acb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8651f0a024 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1065 identity=49853 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-user-b5flw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 e9a33611-ccb8-47ad-859c-e662cb6d771b default }" containerID=796f47b2f11e08a5db65c74607b2c958bd6b80de764a2c190d3eb23f2cff6fba datapathConfiguration="&{false false false false false }" interface=lxcb13ff6da895f k8sPodName=openstack/glance-metadefs-load-mf2bg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=796f47b2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=790 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-mf2bg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=796f47b2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=790 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f065b2ce-3c9f-49e7-b10c-7b96d032b357,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=f065b2ce-3c9f-49e7-b10c-7b96d032b357,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-mf2bg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f065b2ce-3c9f-49e7-b10c-7b96d032b357;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=f065b2ce-3c9f-49e7-b10c-7b96d032b357;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=796f47b2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=790 identity=14420 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f065b2ce-3c9f-49e7-b10c-7b96d032b357,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=f065b2ce-3c9f-49e7-b10c-7b96d032b357,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-mf2bg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=796f47b2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=790 identity=14420 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-mf2bg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=796f47b2f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=790 identity=14420 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-mf2bg subsys=endpoint level=info msg="Successful endpoint creation" containerID=796f47b2f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=790 identity=14420 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-mf2bg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=796f47b2f1 endpointID=790 k8sNamespace=openstack k8sPodName=glance-metadefs-load-mf2bg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f065b2ce-3c9f-49e7-b10c-7b96d032b357 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=f065b2ce-3c9f-49e7-b10c-7b96d032b357 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=796f47b2f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=790 identity=14420 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-mf2bg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 296ca11b-2e26-4224-950c-69e376cb5953 default }" containerID=995ca5db53fa12b28a3d168093bc343b7273d3ea7b051cb2b43e7ff2ab1a3e1b datapathConfiguration="&{false false false false false }" interface=lxcc82adca75ad0 k8sPodName=openstack/glance-storage-init-t5lkv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=995ca5db53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-storage-init-t5lkv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=995ca5db53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a2dd7579-9cca-4a43-a191-35de708a658a,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a2dd7579-9cca-4a43-a191-35de708a658a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-storage-init-t5lkv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a2dd7579-9cca-4a43-a191-35de708a658a;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=a2dd7579-9cca-4a43-a191-35de708a658a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=995ca5db53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 identity=57142 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a2dd7579-9cca-4a43-a191-35de708a658a,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a2dd7579-9cca-4a43-a191-35de708a658a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-storage-init-t5lkv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=995ca5db53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 identity=57142 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-storage-init-t5lkv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=995ca5db53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1788 identity=57142 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-storage-init-t5lkv subsys=endpoint level=info msg="Successful endpoint creation" containerID=995ca5db53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1788 identity=57142 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-storage-init-t5lkv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=995ca5db53 endpointID=1788 k8sNamespace=openstack k8sPodName=glance-storage-init-t5lkv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a2dd7579-9cca-4a43-a191-35de708a658a k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=a2dd7579-9cca-4a43-a191-35de708a658a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=995ca5db53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1788 identity=57142 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-storage-init-t5lkv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 6feb2a83-2507-4eef-842b-1a4e63070050 default }" containerID=c093c88791ba88a03f6c6bb88511022849605e5e5f8ca6edaa5d2ce328d5fda2 datapathConfiguration="&{false false false false false }" interface=lxc06864657c3f8 k8sPodName=openstack/glance-api-5fbf8867f7-7q6zv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c093c88791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3775 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-api-5fbf8867f7-7q6zv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c093c88791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3775 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-api-5fbf8867f7-7q6zv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c093c88791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3775 identity=14755 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-api-5fbf8867f7-7q6zv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c093c88791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3775 identity=14755 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-api-5fbf8867f7-7q6zv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c093c88791 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3775 identity=14755 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-api-5fbf8867f7-7q6zv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c093c88791 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3775 identity=14755 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-api-5fbf8867f7-7q6zv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.78 9c11dd2a-a9ff-4231-918a-836364501e0c default }" containerID=42640ae3d09b7b6dc0f83e2e861a8fdd612cecdd8ddfe65fa774882a58976694 datapathConfiguration="&{false false false false false }" interface=lxc5eaeb788914b k8sPodName=openstack/staffeln-api-5fbfc5f44b-972jb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42640ae3d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-api-5fbfc5f44b-972jb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42640ae3d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-api-5fbfc5f44b-972jb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42640ae3d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=28881 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-api-5fbfc5f44b-972jb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42640ae3d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=28881 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-api-5fbfc5f44b-972jb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42640ae3d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=937 identity=28881 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-api-5fbfc5f44b-972jb subsys=endpoint level=info msg="Successful endpoint creation" containerID=42640ae3d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=937 identity=28881 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-api-5fbfc5f44b-972jb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.194 c34a6ffc-fa90-48e8-b20a-56aa203578c4 default }" containerID=720260e4ac15109dbd56c7cca736a373c1498d30d83d113d5ba63b0b41553904 datapathConfiguration="&{false false false false false }" interface=lxc3eae77108768 k8sPodName=openstack/staffeln-db-init-pz27w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=720260e4ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-db-init-pz27w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=720260e4ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=661641ff-c1cb-477b-8606-9ded03ad77bc,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=661641ff-c1cb-477b-8606-9ded03ad77bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-db-init-pz27w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.153 8f527bb5-8206-4ab5-83d3-4ac25a5a6322 default }" containerID=42bc6624433a5d0458e354802acbb67974c64eae950b86f0e38054db7dd2b5d2 datapathConfiguration="&{false false false false false }" interface=lxc673497af24b0 k8sPodName=openstack/staffeln-conductor-5659cb6bb9-s8lmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42bc662443 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1206 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-conductor-5659cb6bb9-s8lmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42bc662443 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1206 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-conductor-5659cb6bb9-s8lmx subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=661641ff-c1cb-477b-8606-9ded03ad77bc;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=661641ff-c1cb-477b-8606-9ded03ad77bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=720260e4ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identity=1390 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=661641ff-c1cb-477b-8606-9ded03ad77bc,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=661641ff-c1cb-477b-8606-9ded03ad77bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-db-init-pz27w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=720260e4ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identity=1390 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-db-init-pz27w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42bc662443 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1206 identity=32249 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-conductor-5659cb6bb9-s8lmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42bc662443 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1206 identity=32249 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-conductor-5659cb6bb9-s8lmx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=720260e4ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1745 identity=1390 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-db-init-pz27w subsys=endpoint level=info msg="Successful endpoint creation" containerID=720260e4ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1745 identity=1390 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-db-init-pz27w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=42bc662443 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1206 identity=32249 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-conductor-5659cb6bb9-s8lmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=42bc662443 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1206 identity=32249 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-conductor-5659cb6bb9-s8lmx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=720260e4ac endpointID=1745 k8sNamespace=openstack k8sPodName=staffeln-db-init-pz27w subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=661641ff-c1cb-477b-8606-9ded03ad77bc k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=661641ff-c1cb-477b-8606-9ded03ad77bc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=720260e4ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1745 identity=1390 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-db-init-pz27w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 74e73b6f-8cf4-4496-9ed0-2c1ea72066e8 default }" containerID=19d957a03097fa163bcab993acc3f961d6dc0f84963a9c07cd53b940ffd3a041 datapathConfiguration="&{false false false false false }" interface=lxc375adf7376fe k8sPodName=openstack/staffeln-db-sync-zsf28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19d957a030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/staffeln-db-sync-zsf28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19d957a030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f953daa4-04b5-4b06-a3c8-5104f8d5f171,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f953daa4-04b5-4b06-a3c8-5104f8d5f171,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/staffeln-db-sync-zsf28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=f953daa4-04b5-4b06-a3c8-5104f8d5f171;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=f953daa4-04b5-4b06-a3c8-5104f8d5f171;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19d957a030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=28723 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f953daa4-04b5-4b06-a3c8-5104f8d5f171,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f953daa4-04b5-4b06-a3c8-5104f8d5f171,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/staffeln-db-sync-zsf28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19d957a030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=28723 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/staffeln-db-sync-zsf28 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19d957a030 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=153 identity=28723 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/staffeln-db-sync-zsf28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19d957a030 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=153 identity=28723 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/staffeln-db-sync-zsf28 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19d957a030 endpointID=153 k8sNamespace=openstack k8sPodName=staffeln-db-sync-zsf28 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=f953daa4-04b5-4b06-a3c8-5104f8d5f171 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=f953daa4-04b5-4b06-a3c8-5104f8d5f171 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=19d957a030 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=153 identity=28723 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/staffeln-db-sync-zsf28 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 8c35e90f-0c93-4d6a-887a-3783cecb26fc default }" containerID=9d7308fc5427f199d6d4c2369a5fdb33e4e45c42a0b4c1cd3df4e0e811d02e68 datapathConfiguration="&{false false false false false }" interface=lxc7c5769298a22 k8sPodName=local-path-storage/helper-pod-create-pvc-937ede5a-af95-4c11-bdb4-6d1e2788ed4d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d7308fc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-937ede5a-af95-4c11-bdb4-6d1e2788ed4d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d7308fc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-937ede5a-af95-4c11-bdb4-6d1e2788ed4d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d7308fc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identity=25051 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-937ede5a-af95-4c11-bdb4-6d1e2788ed4d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d7308fc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identity=25051 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-937ede5a-af95-4c11-bdb4-6d1e2788ed4d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d7308fc54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3232 identity=25051 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-937ede5a-af95-4c11-bdb4-6d1e2788ed4d subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d7308fc54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3232 identity=25051 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-937ede5a-af95-4c11-bdb4-6d1e2788ed4d subsys=daemon level=info msg="Delete endpoint request" containerID=9d7308fc54 endpointID=3232 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-937ede5a-af95-4c11-bdb4-6d1e2788ed4d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9d7308fc54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3232 identity=25051 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-937ede5a-af95-4c11-bdb4-6d1e2788ed4d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 d3be334b-18ef-42b3-a187-955db44593d1 default }" containerID=e33de117f1faf7aa4d25880be5e916eaf749b23ac67bf7f9b0c4ee588e9a0ec8 datapathConfiguration="&{false false false false false }" interface=lxc49ef0ed50af8 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e33de117f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e33de117f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e33de117f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e33de117f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identity=39424 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e33de117f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identity=39424 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e33de117f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=493 identity=39424 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e33de117f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=493 identity=39424 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.238 d50c0f70-1b08-4a4a-8c89-3b0ad8a1c862 default }" containerID=dcc8c259676352879172b53adbd7f427b683d6fb367541dc73894293c65eec5b datapathConfiguration="&{false false false false false }" interface=lxc207b8d2185e7 k8sPodName=openstack/cinder-api-75c6bcd7b7-swnpk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dcc8c25967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-api-75c6bcd7b7-swnpk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dcc8c25967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-api-75c6bcd7b7-swnpk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dcc8c25967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=34287 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-api-75c6bcd7b7-swnpk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dcc8c25967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=34287 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-api-75c6bcd7b7-swnpk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 a24eccd7-ee30-4d91-b657-5b403e6a9c70 default }" containerID=b181a09e4112d5b5fa60dd7532322a287df6667e7d3be5601ec43ec1670cdd61 datapathConfiguration="&{false false false false false }" interface=lxc0cf66137938c k8sPodName=openstack/cinder-scheduler-685559f57-4ksdq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b181a09e41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1372 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-scheduler-685559f57-4ksdq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b181a09e41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1372 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-scheduler-685559f57-4ksdq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b181a09e41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1372 identity=28733 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-scheduler-685559f57-4ksdq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b181a09e41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1372 identity=28733 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-scheduler-685559f57-4ksdq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 72a54d5e-a0f8-4f5c-a62a-6212d79c2121 default }" containerID=5351b7565b276fabdc4b89aa0a1601f746671e111c47a9d81945942424194d8c datapathConfiguration="&{false false false false false }" interface=lxc839e7de2dfb1 k8sPodName=openstack/cinder-db-init-79vjp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5351b7565b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/cinder-db-init-79vjp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5351b7565b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=402b3b2e-622b-4158-a8f9-1248eb786865,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=402b3b2e-622b-4158-a8f9-1248eb786865,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/cinder-db-init-79vjp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=402b3b2e-622b-4158-a8f9-1248eb786865;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=402b3b2e-622b-4158-a8f9-1248eb786865;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5351b7565b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identity=6411 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=402b3b2e-622b-4158-a8f9-1248eb786865,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=402b3b2e-622b-4158-a8f9-1248eb786865,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/cinder-db-init-79vjp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5351b7565b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identity=6411 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/cinder-db-init-79vjp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dcc8c25967 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=351 identity=34287 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-api-75c6bcd7b7-swnpk subsys=endpoint level=info msg="Successful endpoint creation" containerID=dcc8c25967 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=351 identity=34287 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/cinder-api-75c6bcd7b7-swnpk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b181a09e41 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1372 identity=28733 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-scheduler-685559f57-4ksdq subsys=endpoint level=info msg="Successful endpoint creation" containerID=b181a09e41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1372 identity=28733 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-scheduler-685559f57-4ksdq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5351b7565b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1006 identity=6411 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/cinder-db-init-79vjp subsys=endpoint level=info msg="Successful endpoint creation" containerID=5351b7565b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1006 identity=6411 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/cinder-db-init-79vjp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5351b7565b endpointID=1006 k8sNamespace=openstack k8sPodName=cinder-db-init-79vjp subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=402b3b2e-622b-4158-a8f9-1248eb786865 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=402b3b2e-622b-4158-a8f9-1248eb786865 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=5351b7565b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1006 identity=6411 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/cinder-db-init-79vjp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 73877c2a-9413-42d0-ac98-992054d675e1 default }" containerID=3a34149c17d97c2528312fb1498aac903723542e2150abd9c67711ad6b7fcdeb datapathConfiguration="&{false false false false false }" interface=lxcf721e0c31da5 k8sPodName=openstack/cinder-db-sync-q9qcx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a34149c17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3639 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-db-sync-q9qcx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a34149c17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3639 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=01fb4619-59a9-4ed7-8510-21f8d218a1e7,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=01fb4619-59a9-4ed7-8510-21f8d218a1e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-db-sync-q9qcx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=01fb4619-59a9-4ed7-8510-21f8d218a1e7;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=01fb4619-59a9-4ed7-8510-21f8d218a1e7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a34149c17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3639 identity=1191 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=01fb4619-59a9-4ed7-8510-21f8d218a1e7,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=01fb4619-59a9-4ed7-8510-21f8d218a1e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-db-sync-q9qcx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a34149c17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3639 identity=1191 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-db-sync-q9qcx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a34149c17 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3639 identity=1191 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-db-sync-q9qcx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a34149c17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3639 identity=1191 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-db-sync-q9qcx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a34149c17 endpointID=3639 k8sNamespace=openstack k8sPodName=cinder-db-sync-q9qcx subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=01fb4619-59a9-4ed7-8510-21f8d218a1e7 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=01fb4619-59a9-4ed7-8510-21f8d218a1e7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=3a34149c17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3639 identity=1191 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-db-sync-q9qcx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 d0ff613d-9fbe-4428-b066-cc61c7e22b1f default }" containerID=16c937622d5ccd590accce58b6ecb7135762dc53c5beeef989ef70ca6b15b37f datapathConfiguration="&{false false false false false }" interface=lxc0e90f0ae574b k8sPodName=openstack/cinder-rabbit-init-pg2g5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16c937622d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-rabbit-init-pg2g5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16c937622d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=404e1184-92b9-485d-9dd0-21a5cd6dd7f6,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=404e1184-92b9-485d-9dd0-21a5cd6dd7f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-rabbit-init-pg2g5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=404e1184-92b9-485d-9dd0-21a5cd6dd7f6;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=404e1184-92b9-485d-9dd0-21a5cd6dd7f6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=16c937622d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-rabbit-init-pg2g5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=16c937622d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identity=4081 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=404e1184-92b9-485d-9dd0-21a5cd6dd7f6,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=404e1184-92b9-485d-9dd0-21a5cd6dd7f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-rabbit-init-pg2g5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16c937622d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identity=4081 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-rabbit-init-pg2g5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16c937622d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=478 identity=4081 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-rabbit-init-pg2g5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=16c937622d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=478 identity=4081 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-rabbit-init-pg2g5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=16c937622d endpointID=478 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-pg2g5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=404e1184-92b9-485d-9dd0-21a5cd6dd7f6 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=404e1184-92b9-485d-9dd0-21a5cd6dd7f6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=16c937622d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=478 identity=4081 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-rabbit-init-pg2g5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 35a88348-ae87-43e8-a9c7-07fa8714fe0b default }" containerID=d4db72d0ba7b5ff010fbada3dd2f1b3db6b85ef7b358f5c63bfa99768c4c87df datapathConfiguration="&{false false false false false }" interface=lxc0fe4b6407999 k8sPodName=openstack/cinder-ks-service-vcfpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4db72d0ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3346 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/cinder-ks-service-vcfpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4db72d0ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3346 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c7fdd40c-a383-42dc-8bb0-bec8e8d619cb,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=c7fdd40c-a383-42dc-8bb0-bec8e8d619cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/cinder-ks-service-vcfpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c7fdd40c-a383-42dc-8bb0-bec8e8d619cb;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=c7fdd40c-a383-42dc-8bb0-bec8e8d619cb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4db72d0ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3346 identity=28856 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c7fdd40c-a383-42dc-8bb0-bec8e8d619cb,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=c7fdd40c-a383-42dc-8bb0-bec8e8d619cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/cinder-ks-service-vcfpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4db72d0ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3346 identity=28856 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/cinder-ks-service-vcfpf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d4db72d0ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3346 identity=28856 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/cinder-ks-service-vcfpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4db72d0ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3346 identity=28856 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/cinder-ks-service-vcfpf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d4db72d0ba endpointID=3346 k8sNamespace=openstack k8sPodName=cinder-ks-service-vcfpf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c7fdd40c-a383-42dc-8bb0-bec8e8d619cb k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=c7fdd40c-a383-42dc-8bb0-bec8e8d619cb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d4db72d0ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3346 identity=28856 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/cinder-ks-service-vcfpf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 2a31eedf-2687-47c0-b654-91f840755273 default }" containerID=feba9a4ec357b3650d1ef5dd0f505028fc2ec169c4a5da91c2be3479f45c5d5f datapathConfiguration="&{false false false false false }" interface=lxc4fdc154617da k8sPodName=openstack/cinder-ks-endpoints-dm9lq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=feba9a4ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2704 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-endpoints-dm9lq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=feba9a4ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2704 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f246a7d6-cdeb-42d4-bf65-8dfb6677d379,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f246a7d6-cdeb-42d4-bf65-8dfb6677d379,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-endpoints-dm9lq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=f246a7d6-cdeb-42d4-bf65-8dfb6677d379;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f246a7d6-cdeb-42d4-bf65-8dfb6677d379;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=feba9a4ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2704 identity=62268 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f246a7d6-cdeb-42d4-bf65-8dfb6677d379,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f246a7d6-cdeb-42d4-bf65-8dfb6677d379,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-endpoints-dm9lq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=feba9a4ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2704 identity=62268 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-endpoints-dm9lq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=feba9a4ec3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2704 identity=62268 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-endpoints-dm9lq subsys=endpoint level=info msg="Successful endpoint creation" containerID=feba9a4ec3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2704 identity=62268 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-endpoints-dm9lq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=feba9a4ec3 endpointID=2704 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-dm9lq subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=f246a7d6-cdeb-42d4-bf65-8dfb6677d379 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f246a7d6-cdeb-42d4-bf65-8dfb6677d379 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=feba9a4ec3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2704 identity=62268 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-endpoints-dm9lq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 4bf9d9bd-47b3-4653-954e-81cd31a5363c default }" containerID=a8e4ee88893d8220fff2cec9faabcc6e8c6ad08e69c20cd495cdd93d41a60ee1 datapathConfiguration="&{false false false false false }" interface=lxc971c90a463a4 k8sPodName=openstack/cinder-ks-user-rvqrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8e4ee8889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3912 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-ks-user-rvqrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8e4ee8889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3912 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1a799d3a-7531-463e-b3b5-e51e02580a8d,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=1a799d3a-7531-463e-b3b5-e51e02580a8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-ks-user-rvqrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1a799d3a-7531-463e-b3b5-e51e02580a8d;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=1a799d3a-7531-463e-b3b5-e51e02580a8d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8e4ee8889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3912 identity=59523 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1a799d3a-7531-463e-b3b5-e51e02580a8d,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=1a799d3a-7531-463e-b3b5-e51e02580a8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-ks-user-rvqrj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a8e4ee8889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3912 identity=59523 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-ks-user-rvqrj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8e4ee8889 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3912 identity=59523 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-ks-user-rvqrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8e4ee8889 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3912 identity=59523 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-ks-user-rvqrj subsys=daemon level=info msg="Delete endpoint request" containerID=a8e4ee8889 endpointID=3912 k8sNamespace=openstack k8sPodName=cinder-ks-user-rvqrj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1a799d3a-7531-463e-b3b5-e51e02580a8d k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=1a799d3a-7531-463e-b3b5-e51e02580a8d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=a8e4ee8889 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3912 identity=59523 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-ks-user-rvqrj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 5b5ef6bb-2aaf-40cb-a676-9455869a27b5 default }" containerID=11a9fc6fc232af34be6137bba38022c7056cb3d3c3db05ec43cbb77989a8d08f datapathConfiguration="&{false false false false false }" interface=lxcccd3d5a1c73c k8sPodName=openstack/cinder-backup-storage-init-zzwpw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11a9fc6fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-backup-storage-init-zzwpw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11a9fc6fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3f5b7fd5-e99c-4906-9a94-63c6746cbb5c,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=3f5b7fd5-e99c-4906-9a94-63c6746cbb5c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-backup-storage-init-zzwpw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=11a9fc6fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-backup-storage-init-zzwpw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=3f5b7fd5-e99c-4906-9a94-63c6746cbb5c;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=3f5b7fd5-e99c-4906-9a94-63c6746cbb5c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11a9fc6fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identity=60783 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3f5b7fd5-e99c-4906-9a94-63c6746cbb5c,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=3f5b7fd5-e99c-4906-9a94-63c6746cbb5c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-backup-storage-init-zzwpw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11a9fc6fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identity=60783 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-backup-storage-init-zzwpw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11a9fc6fc2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1361 identity=60783 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-backup-storage-init-zzwpw subsys=endpoint level=info msg="Successful endpoint creation" containerID=11a9fc6fc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1361 identity=60783 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-backup-storage-init-zzwpw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=11a9fc6fc2 endpointID=1361 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-zzwpw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=3f5b7fd5-e99c-4906-9a94-63c6746cbb5c k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=3f5b7fd5-e99c-4906-9a94-63c6746cbb5c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=11a9fc6fc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1361 identity=60783 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-backup-storage-init-zzwpw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 78db0565-ce12-46c0-a76f-3c24489d4cca default }" containerID=446f94ad1c8440506e15c11220535d7160c0b5711b7d7af5935318e4cfd5fef5 datapathConfiguration="&{false false false false false }" interface=lxc8c46d8a8501d k8sPodName=openstack/cinder-create-internal-tenant-m5zfg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=446f94ad1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3452 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-m5zfg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=446f94ad1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3452 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=69e0fa7b-454c-4cc0-b7c9-4f40d909a943,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=69e0fa7b-454c-4cc0-b7c9-4f40d909a943,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-m5zfg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=69e0fa7b-454c-4cc0-b7c9-4f40d909a943;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=69e0fa7b-454c-4cc0-b7c9-4f40d909a943;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=446f94ad1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3452 identity=5298 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=69e0fa7b-454c-4cc0-b7c9-4f40d909a943,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=69e0fa7b-454c-4cc0-b7c9-4f40d909a943,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-m5zfg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=446f94ad1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3452 identity=5298 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-m5zfg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=446f94ad1c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3452 identity=5298 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-m5zfg subsys=endpoint level=info msg="Successful endpoint creation" containerID=446f94ad1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3452 identity=5298 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-m5zfg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=446f94ad1c endpointID=3452 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-m5zfg subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=69e0fa7b-454c-4cc0-b7c9-4f40d909a943 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=69e0fa7b-454c-4cc0-b7c9-4f40d909a943 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=446f94ad1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3452 identity=5298 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-m5zfg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 ab8a80ac-f570-4cb0-8131-08877344ce21 default }" containerID=3e36fae5d42a52814caee9f70eabc3e29447ffae57be04ce22c2a90252a5eca0 datapathConfiguration="&{false false false false false }" interface=lxcd18090c7cb9a k8sPodName=openstack/cinder-storage-init-59bqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e36fae5d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/cinder-storage-init-59bqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e36fae5d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e56296dd-c95e-4822-b35f-58e19e3d8111,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=e56296dd-c95e-4822-b35f-58e19e3d8111,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/cinder-storage-init-59bqj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e56296dd-c95e-4822-b35f-58e19e3d8111;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=e56296dd-c95e-4822-b35f-58e19e3d8111;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e36fae5d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identity=7041 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e56296dd-c95e-4822-b35f-58e19e3d8111,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=e56296dd-c95e-4822-b35f-58e19e3d8111,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/cinder-storage-init-59bqj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3e36fae5d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identity=7041 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/cinder-storage-init-59bqj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e36fae5d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1281 identity=7041 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/cinder-storage-init-59bqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e36fae5d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1281 identity=7041 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/cinder-storage-init-59bqj subsys=daemon level=info msg="Delete endpoint request" containerID=3e36fae5d4 endpointID=1281 k8sNamespace=openstack k8sPodName=cinder-storage-init-59bqj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e56296dd-c95e-4822-b35f-58e19e3d8111 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=e56296dd-c95e-4822-b35f-58e19e3d8111 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=3e36fae5d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1281 identity=7041 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/cinder-storage-init-59bqj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 097838ef-79e6-471c-92db-b736a50c001d default }" containerID=32fd81b8c7a0b7e85683d134f68c307336f10631251adc9d6c489a322242540d datapathConfiguration="&{false false false false false }" interface=lxcf999e5e95c76 k8sPodName=openstack/cinder-bootstrap-lvlvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32fd81b8c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-bootstrap-lvlvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32fd81b8c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e97f0f05-ce40-467f-ba2c-76fc05999d6e,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e97f0f05-ce40-467f-ba2c-76fc05999d6e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-bootstrap-lvlvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=32fd81b8c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-bootstrap-lvlvw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e97f0f05-ce40-467f-ba2c-76fc05999d6e;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=e97f0f05-ce40-467f-ba2c-76fc05999d6e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32fd81b8c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identity=11830 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e97f0f05-ce40-467f-ba2c-76fc05999d6e,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e97f0f05-ce40-467f-ba2c-76fc05999d6e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-bootstrap-lvlvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32fd81b8c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identity=11830 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-bootstrap-lvlvw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=32fd81b8c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3934 identity=11830 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-bootstrap-lvlvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=32fd81b8c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3934 identity=11830 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-bootstrap-lvlvw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.176 d36c1d36-db31-434f-9874-a70adb5824d5 default }" containerID=63eacb8a8d7dcc50b4fd3be72664e3418e4dfa14ba0e88daa2d4f37a3252238f datapathConfiguration="&{false false false false false }" interface=lxcc2e56500932d k8sPodName=openstack/cinder-backup-64dff66967-sqxt2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63eacb8a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-backup-64dff66967-sqxt2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63eacb8a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-backup-64dff66967-sqxt2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=63eacb8a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-backup-64dff66967-sqxt2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63eacb8a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identity=64620 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-backup-64dff66967-sqxt2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63eacb8a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identity=64620 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-backup-64dff66967-sqxt2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63eacb8a8d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=507 identity=64620 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-backup-64dff66967-sqxt2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=63eacb8a8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=507 identity=64620 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/cinder-backup-64dff66967-sqxt2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.235 7c4dc20f-01c5-46e6-8748-c42151d09332 default }" containerID=d3f7315a3c96edf1d24cddd5b90bbd4763f35e86a8437f7589f7dc8471ddf30c datapathConfiguration="&{false false false false false }" interface=lxca25834444aad k8sPodName=openstack/cinder-volume-86bb4fc97d-bvzv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3f7315a3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-volume-86bb4fc97d-bvzv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3f7315a3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-volume-86bb4fc97d-bvzv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3f7315a3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 identity=35369 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-volume-86bb4fc97d-bvzv6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3f7315a3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 identity=35369 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-volume-86bb4fc97d-bvzv6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3f7315a3c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3262 identity=35369 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-volume-86bb4fc97d-bvzv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3f7315a3c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3262 identity=35369 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-volume-86bb4fc97d-bvzv6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=32fd81b8c7 endpointID=3934 k8sNamespace=openstack k8sPodName=cinder-bootstrap-lvlvw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e97f0f05-ce40-467f-ba2c-76fc05999d6e k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=e97f0f05-ce40-467f-ba2c-76fc05999d6e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=32fd81b8c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3934 identity=11830 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-bootstrap-lvlvw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 94386581-75ff-4ad6-b025-268acc1eac3c default }" containerID=e149762827aed65f36e042d7facc46a7fecad8519b9fb513f3e473e00c632533 datapathConfiguration="&{false false false false false }" interface=lxcf50837b95fc7 k8sPodName=openstack/placement-api-54cbf5cfdc-rzfh8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e149762827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/placement-api-54cbf5cfdc-rzfh8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e149762827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/placement-api-54cbf5cfdc-rzfh8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e149762827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identity=46057 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/placement-api-54cbf5cfdc-rzfh8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e149762827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identity=46057 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/placement-api-54cbf5cfdc-rzfh8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 e8482d6f-344f-4a05-9a41-853e6f5069ce default }" containerID=98bc26bd0a452955302357dc21b7d7e254b1050745b46ad531cc68a551d3ba16 datapathConfiguration="&{false false false false false }" interface=lxc2f0fcd23bdf7 k8sPodName=openstack/placement-db-init-xb8jk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98bc26bd0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/placement-db-init-xb8jk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98bc26bd0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2069d3af-d758-4d52-8ac3-51718f90fc3d,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=2069d3af-d758-4d52-8ac3-51718f90fc3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/placement-db-init-xb8jk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=2069d3af-d758-4d52-8ac3-51718f90fc3d;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=2069d3af-d758-4d52-8ac3-51718f90fc3d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98bc26bd0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identity=12389 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2069d3af-d758-4d52-8ac3-51718f90fc3d,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=2069d3af-d758-4d52-8ac3-51718f90fc3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/placement-db-init-xb8jk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98bc26bd0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identity=12389 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/placement-db-init-xb8jk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e149762827 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1942 identity=46057 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/placement-api-54cbf5cfdc-rzfh8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e149762827 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1942 identity=46057 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/placement-api-54cbf5cfdc-rzfh8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=98bc26bd0a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2023 identity=12389 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/placement-db-init-xb8jk subsys=endpoint level=info msg="Successful endpoint creation" containerID=98bc26bd0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2023 identity=12389 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/placement-db-init-xb8jk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=98bc26bd0a endpointID=2023 k8sNamespace=openstack k8sPodName=placement-db-init-xb8jk subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=2069d3af-d758-4d52-8ac3-51718f90fc3d k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=2069d3af-d758-4d52-8ac3-51718f90fc3d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=98bc26bd0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2023 identity=12389 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/placement-db-init-xb8jk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 9474c05b-8feb-4f6d-a1b7-ef629e19e164 default }" containerID=43da6796e5dad586d8ec92b9fb134f4b1257a465c54349bfd5521809f65b4100 datapathConfiguration="&{false false false false false }" interface=lxc16c1ef0d04fa k8sPodName=openstack/placement-db-sync-mcjd5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43da6796e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-db-sync-mcjd5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43da6796e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=582d7d3a-886f-487b-ad26-9ab2407e4d87,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=582d7d3a-886f-487b-ad26-9ab2407e4d87,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-db-sync-mcjd5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=43da6796e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-db-sync-mcjd5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=582d7d3a-886f-487b-ad26-9ab2407e4d87;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=582d7d3a-886f-487b-ad26-9ab2407e4d87;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43da6796e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identity=59797 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=582d7d3a-886f-487b-ad26-9ab2407e4d87,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=582d7d3a-886f-487b-ad26-9ab2407e4d87,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-db-sync-mcjd5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43da6796e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identity=59797 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-db-sync-mcjd5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43da6796e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1205 identity=59797 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-db-sync-mcjd5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=43da6796e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1205 identity=59797 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-db-sync-mcjd5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=43da6796e5 endpointID=1205 k8sNamespace=openstack k8sPodName=placement-db-sync-mcjd5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=582d7d3a-886f-487b-ad26-9ab2407e4d87 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=582d7d3a-886f-487b-ad26-9ab2407e4d87 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=43da6796e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1205 identity=59797 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-db-sync-mcjd5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 a805e165-d70b-4466-b6f6-7bd9e9c9a509 default }" containerID=b79551eb8354cf4783ae44e8eb6db8d0363263472e12b567474ca2a683387515 datapathConfiguration="&{false false false false false }" interface=lxc15afa64c2d55 k8sPodName=openstack/placement-ks-service-xnxcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b79551eb83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-service-xnxcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b79551eb83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=92a10238-14ec-40f0-92ab-333018b949ae,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=92a10238-14ec-40f0-92ab-333018b949ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-service-xnxcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=92a10238-14ec-40f0-92ab-333018b949ae;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=92a10238-14ec-40f0-92ab-333018b949ae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b79551eb83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identity=3533 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=92a10238-14ec-40f0-92ab-333018b949ae,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=92a10238-14ec-40f0-92ab-333018b949ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-service-xnxcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b79551eb83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identity=3533 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-service-xnxcs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b79551eb83 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1973 identity=3533 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-service-xnxcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=b79551eb83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1973 identity=3533 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-service-xnxcs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b79551eb83 endpointID=1973 k8sNamespace=openstack k8sPodName=placement-ks-service-xnxcs subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=92a10238-14ec-40f0-92ab-333018b949ae k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=92a10238-14ec-40f0-92ab-333018b949ae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=b79551eb83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1973 identity=3533 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/placement-ks-service-xnxcs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 c6794928-a84a-49b0-8950-3d3e6ed20927 default }" containerID=8a66a0716579497bd9f2f0320b588136f06411623eb857256242afe0a150d75a datapathConfiguration="&{false false false false false }" interface=lxc1f0f77453d72 k8sPodName=openstack/placement-ks-user-52pt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a66a07165 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/placement-ks-user-52pt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a66a07165 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=49f9cf2b-b675-4d2a-aa6a-b1a6f1a22e4e,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=49f9cf2b-b675-4d2a-aa6a-b1a6f1a22e4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/placement-ks-user-52pt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=49f9cf2b-b675-4d2a-aa6a-b1a6f1a22e4e;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=49f9cf2b-b675-4d2a-aa6a-b1a6f1a22e4e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8a66a07165 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identity=28223 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=49f9cf2b-b675-4d2a-aa6a-b1a6f1a22e4e,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=49f9cf2b-b675-4d2a-aa6a-b1a6f1a22e4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/placement-ks-user-52pt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a66a07165 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identity=28223 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/placement-ks-user-52pt7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a66a07165 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1386 identity=28223 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/placement-ks-user-52pt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a66a07165 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1386 identity=28223 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/placement-ks-user-52pt7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8a66a07165 endpointID=1386 k8sNamespace=openstack k8sPodName=placement-ks-user-52pt7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=49f9cf2b-b675-4d2a-aa6a-b1a6f1a22e4e k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=49f9cf2b-b675-4d2a-aa6a-b1a6f1a22e4e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=8a66a07165 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1386 identity=28223 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/placement-ks-user-52pt7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 9c4905fe-11ba-4e19-bfae-0a0edaf329da default }" containerID=e9b1e47c07cdff36b3ceecf9496bd091d08c7d5557952378bb3efa4a0c521be8 datapathConfiguration="&{false false false false false }" interface=lxce564a0051c2f k8sPodName=openstack/placement-ks-endpoints-7sttk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9b1e47c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-ks-endpoints-7sttk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9b1e47c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=0966af9b-7b1c-455b-ac6d-b854d9c0a034,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0966af9b-7b1c-455b-ac6d-b854d9c0a034,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-ks-endpoints-7sttk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=0966af9b-7b1c-455b-ac6d-b854d9c0a034;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0966af9b-7b1c-455b-ac6d-b854d9c0a034;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9b1e47c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 identity=29770 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=0966af9b-7b1c-455b-ac6d-b854d9c0a034,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0966af9b-7b1c-455b-ac6d-b854d9c0a034,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-ks-endpoints-7sttk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9b1e47c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 identity=29770 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-ks-endpoints-7sttk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9b1e47c07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2398 identity=29770 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-ks-endpoints-7sttk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9b1e47c07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2398 identity=29770 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-ks-endpoints-7sttk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e9b1e47c07 endpointID=2398 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-7sttk subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=0966af9b-7b1c-455b-ac6d-b854d9c0a034 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0966af9b-7b1c-455b-ac6d-b854d9c0a034 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=e9b1e47c07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2398 identity=29770 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-ks-endpoints-7sttk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 ec3b5948-2803-41ba-b11f-7c4bf7bdfa47 default }" containerID=7d7a63f00f883f1bf1e381900660b2ea2d63c3d19d86c0b8d941a02f9a337abc datapathConfiguration="&{false false false false false }" interface=lxc1d6183fc012f k8sPodName=openstack/neutron-coredns-7dd4958666-4vt5n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d7a63f00f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-4vt5n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d7a63f00f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-4vt5n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d7a63f00f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 identity=3050 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-4vt5n oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7d7a63f00f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 identity=3050 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-4vt5n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d7a63f00f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3676 identity=3050 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-4vt5n subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d7a63f00f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3676 identity=3050 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-4vt5n subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.233 f7a743ea-abb2-4260-834a-0856efa49801 default }" containerID=702561725d87024d289e84311ed14792472c262362e08fa71835f60608be656b datapathConfiguration="&{false false false false false }" interface=lxc225dec9c39a2 k8sPodName=local-path-storage/helper-pod-create-pvc-4637e2e1-e646-4ed4-a7c9-4edaea9f5382 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=702561725d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3924 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4637e2e1-e646-4ed4-a7c9-4edaea9f5382 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=702561725d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3924 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4637e2e1-e646-4ed4-a7c9-4edaea9f5382 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=702561725d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3924 identity=25051 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4637e2e1-e646-4ed4-a7c9-4edaea9f5382 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=702561725d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3924 identity=25051 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4637e2e1-e646-4ed4-a7c9-4edaea9f5382 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=702561725d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3924 identity=25051 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4637e2e1-e646-4ed4-a7c9-4edaea9f5382 subsys=endpoint level=info msg="Successful endpoint creation" containerID=702561725d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3924 identity=25051 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4637e2e1-e646-4ed4-a7c9-4edaea9f5382 subsys=daemon level=info msg="Delete endpoint request" containerID=702561725d endpointID=3924 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4637e2e1-e646-4ed4-a7c9-4edaea9f5382 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=702561725d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3924 identity=25051 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4637e2e1-e646-4ed4-a7c9-4edaea9f5382 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 92ce94d7-9bce-4b7c-b860-bed587c1c80c default }" containerID=b714fac99a09180366be5c7f279855d5fc6aa3d3da18d7a8cf740f9026e03169 datapathConfiguration="&{false false false false false }" interface=lxc20db6bb162e5 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b714fac99a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b714fac99a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b714fac99a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b714fac99a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 identity=36364 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b714fac99a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 identity=36364 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b714fac99a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3244 identity=36364 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b714fac99a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3244 identity=36364 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 4ee454c1-ab43-4294-b788-00b359b5a23f default }" containerID=ffeb28147daeddee3c2ee1362ed9063baafcdd81e564501248c7183a1de36729 datapathConfiguration="&{false false false false false }" interface=lxc7dab1c764eb9 k8sPodName=openstack/nova-api-osapi-676b6699bd-24xkx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffeb28147d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/nova-api-osapi-676b6699bd-24xkx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffeb28147d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/nova-api-osapi-676b6699bd-24xkx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ffeb28147d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identity=13070 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/nova-api-osapi-676b6699bd-24xkx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffeb28147d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identity=13070 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/nova-api-osapi-676b6699bd-24xkx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 d1b992cb-38a9-439c-b273-ed2696944a83 default }" containerID=7c926feaec940b8ca36a0735de2aca9de6e0a6821ce3335161a71e28547e9e2b datapathConfiguration="&{false false false false false }" interface=lxc338c672cdd6c k8sPodName=openstack/nova-conductor-66bcbf6b64-bp6np labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c926feaec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=790 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/nova-conductor-66bcbf6b64-bp6np subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c926feaec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=790 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/nova-conductor-66bcbf6b64-bp6np subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c926feaec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=790 identity=41866 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/nova-conductor-66bcbf6b64-bp6np oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c926feaec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=790 identity=41866 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/nova-conductor-66bcbf6b64-bp6np subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 8449e320-fdb8-4b6c-9be0-ded2b9f1f5d5 default }" containerID=a9ce2bd335d6285579a89924328ceb1c5888184668febfdde36233f9cc4d094e datapathConfiguration="&{false false false false false }" interface=lxc50d67a6db40d k8sPodName=openstack/nova-scheduler-5f6698df8d-7lx68 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9ce2bd335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-scheduler-5f6698df8d-7lx68 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9ce2bd335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-scheduler-5f6698df8d-7lx68 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9ce2bd335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=33091 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-scheduler-5f6698df8d-7lx68 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9ce2bd335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=33091 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-scheduler-5f6698df8d-7lx68 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 a5e867dc-6266-4d20-880a-bfc50a67289c default }" containerID=4f6acfde5773bf3718eab219e9996fa9fbe50e8c272e1ef99e166f1cd1ae181a datapathConfiguration="&{false false false false false }" interface=lxce78fd5ffd51e k8sPodName=openstack/nova-cell-setup-p6bq9 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.101 eaa8d3e2-d9c8-44bd-8f8e-c40bcd423ea5 default }" containerID=c3d534921a2291ef43404f23a93517d0cb124d896188908b06398ac5a7ef8efd datapathConfiguration="&{false false false false false }" interface=lxc0347aee03e85 k8sPodName=openstack/nova-api-metadata-59897cb7bf-s72q8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f6acfde57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/nova-cell-setup-p6bq9 subsys=endpoint level=info msg="New endpoint" containerID=c3d534921a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1737 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/nova-api-metadata-59897cb7bf-s72q8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f6acfde57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3041f1ed-c3e0-438d-a962-042f5b9e323b,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=3041f1ed-c3e0-438d-a962-042f5b9e323b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/nova-cell-setup-p6bq9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=c3d534921a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1737 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/nova-api-metadata-59897cb7bf-s72q8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 99aad989-da12-4171-b9e3-9fee27071e5a default }" containerID=1c5672cf0600f6e1a3d8755b89dda11a7e4deb9d4ff559b4954e29c05f57a6e4 datapathConfiguration="&{false false false false false }" interface=lxc19b4b3d81f06 k8sPodName=openstack/nova-bootstrap-8r7cd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c5672cf06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/nova-bootstrap-8r7cd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c5672cf06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=208831c9-bc88-4abe-ad9d-85e4bcd9c8ab,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=208831c9-bc88-4abe-ad9d-85e4bcd9c8ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/nova-bootstrap-8r7cd subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=3041f1ed-c3e0-438d-a962-042f5b9e323b;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=3041f1ed-c3e0-438d-a962-042f5b9e323b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f6acfde57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=38827 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=3041f1ed-c3e0-438d-a962-042f5b9e323b,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=3041f1ed-c3e0-438d-a962-042f5b9e323b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/nova-cell-setup-p6bq9 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=4f6acfde57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=264 identity=38827 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/nova-cell-setup-p6bq9 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3d534921a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1737 identity=24679 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/nova-api-metadata-59897cb7bf-s72q8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3d534921a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1737 identity=24679 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/nova-api-metadata-59897cb7bf-s72q8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=ffeb28147d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=970 identity=13070 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/nova-api-osapi-676b6699bd-24xkx subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffeb28147d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=970 identity=13070 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/nova-api-osapi-676b6699bd-24xkx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7c926feaec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=790 identity=41866 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/nova-conductor-66bcbf6b64-bp6np subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c926feaec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=790 identity=41866 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/nova-conductor-66bcbf6b64-bp6np subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a9ce2bd335 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=483 identity=33091 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-scheduler-5f6698df8d-7lx68 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9ce2bd335 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=483 identity=33091 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-scheduler-5f6698df8d-7lx68 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.55 979f5da1-675e-4c5f-84ea-a6a432d7faaf default }" containerID=c4d8e241c7b91b4d831061c8fe9a57933d07f544d0d4e55322f50be38e32f5c5 datapathConfiguration="&{false false false false false }" interface=lxc6822a24d9c33 k8sPodName=openstack/nova-db-init-nmfm6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4d8e241c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-db-init-nmfm6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4d8e241c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=eb96889f-357c-48f7-9fce-4311c9d67174,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=eb96889f-357c-48f7-9fce-4311c9d67174,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-db-init-nmfm6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=208831c9-bc88-4abe-ad9d-85e4bcd9c8ab;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=208831c9-bc88-4abe-ad9d-85e4bcd9c8ab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=1c5672cf06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identity=7507 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=208831c9-bc88-4abe-ad9d-85e4bcd9c8ab,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=208831c9-bc88-4abe-ad9d-85e4bcd9c8ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/nova-bootstrap-8r7cd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c5672cf06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identity=7507 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/nova-bootstrap-8r7cd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3d534921a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1737 identity=24679 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/nova-api-metadata-59897cb7bf-s72q8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3d534921a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1737 identity=24679 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/nova-api-metadata-59897cb7bf-s72q8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4f6acfde57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=264 identity=38827 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/nova-cell-setup-p6bq9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f6acfde57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=264 identity=38827 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/nova-cell-setup-p6bq9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1c5672cf06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=985 identity=7507 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/nova-bootstrap-8r7cd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c5672cf06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=985 identity=7507 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/nova-bootstrap-8r7cd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c4d8e241c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-db-init-nmfm6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=eb96889f-357c-48f7-9fce-4311c9d67174;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=eb96889f-357c-48f7-9fce-4311c9d67174;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4d8e241c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=7067 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=eb96889f-357c-48f7-9fce-4311c9d67174,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=eb96889f-357c-48f7-9fce-4311c9d67174,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-db-init-nmfm6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4d8e241c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=7067 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-db-init-nmfm6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c4d8e241c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=412 identity=7067 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-db-init-nmfm6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4d8e241c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=412 identity=7067 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-db-init-nmfm6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.222 0b1f1a8b-3e31-48f1-9b60-5085e6214c70 default }" containerID=885aeb655a79894cb2e2040919c77640fc118a68f2ddbc987084ade06d306ced datapathConfiguration="&{false false false false false }" interface=lxc3d152c3c284b k8sPodName=openstack/nova-novncproxy-7675f68f8f-gwhd8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=885aeb655a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-novncproxy-7675f68f8f-gwhd8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=885aeb655a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-novncproxy-7675f68f8f-gwhd8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=885aeb655a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 identity=32559 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-novncproxy-7675f68f8f-gwhd8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=885aeb655a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 identity=32559 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-novncproxy-7675f68f8f-gwhd8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=885aeb655a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=475 identity=32559 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-novncproxy-7675f68f8f-gwhd8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=885aeb655a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=475 identity=32559 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-novncproxy-7675f68f8f-gwhd8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c4d8e241c7 endpointID=412 k8sNamespace=openstack k8sPodName=nova-db-init-nmfm6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=eb96889f-357c-48f7-9fce-4311c9d67174 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=eb96889f-357c-48f7-9fce-4311c9d67174 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=c4d8e241c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=412 identity=7067 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-db-init-nmfm6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 aa9f2b3c-a107-4a15-b9f3-05521222363b default }" containerID=74502d8d6877da7974fb43318aa5a498e5aba357c5d5fad9f5d4aea4c259a6ba datapathConfiguration="&{false false false false false }" interface=lxc6a5199f292c4 k8sPodName=openstack/nova-db-sync-2sjdp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74502d8d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-db-sync-2sjdp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74502d8d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f749f7fa-6da9-4922-ba1d-d7075cea6452,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=f749f7fa-6da9-4922-ba1d-d7075cea6452,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-db-sync-2sjdp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=f749f7fa-6da9-4922-ba1d-d7075cea6452;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=f749f7fa-6da9-4922-ba1d-d7075cea6452;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=74502d8d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identity=26169 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f749f7fa-6da9-4922-ba1d-d7075cea6452,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=f749f7fa-6da9-4922-ba1d-d7075cea6452,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-db-sync-2sjdp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74502d8d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identity=26169 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-db-sync-2sjdp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74502d8d68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=220 identity=26169 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-db-sync-2sjdp subsys=endpoint level=info msg="Successful endpoint creation" containerID=74502d8d68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=220 identity=26169 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-db-sync-2sjdp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=74502d8d68 endpointID=220 k8sNamespace=openstack k8sPodName=nova-db-sync-2sjdp subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=f749f7fa-6da9-4922-ba1d-d7075cea6452 k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=f749f7fa-6da9-4922-ba1d-d7075cea6452 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=74502d8d68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=220 identity=26169 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/nova-db-sync-2sjdp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 02d93c37-16f1-4b55-89cc-61def909b0dd default }" containerID=90dc3fa6f940918ab416b93975edbcf0467911a22f51c0034ccea83fe746894f datapathConfiguration="&{false false false false false }" interface=lxcc380ec1e14f4 k8sPodName=openstack/nova-rabbit-init-9n747 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90dc3fa6f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-rabbit-init-9n747 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90dc3fa6f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=5798c95f-8d01-4046-b4ce-6b71e15a16b1,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5798c95f-8d01-4046-b4ce-6b71e15a16b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-rabbit-init-9n747 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=5798c95f-8d01-4046-b4ce-6b71e15a16b1;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5798c95f-8d01-4046-b4ce-6b71e15a16b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90dc3fa6f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=8028 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=5798c95f-8d01-4046-b4ce-6b71e15a16b1,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5798c95f-8d01-4046-b4ce-6b71e15a16b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-rabbit-init-9n747 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90dc3fa6f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=8028 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-rabbit-init-9n747 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90dc3fa6f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=469 identity=8028 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-rabbit-init-9n747 subsys=endpoint level=info msg="Successful endpoint creation" containerID=90dc3fa6f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=469 identity=8028 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-rabbit-init-9n747 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=90dc3fa6f9 endpointID=469 k8sNamespace=openstack k8sPodName=nova-rabbit-init-9n747 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=5798c95f-8d01-4046-b4ce-6b71e15a16b1 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5798c95f-8d01-4046-b4ce-6b71e15a16b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=90dc3fa6f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=469 identity=8028 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/nova-rabbit-init-9n747 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 ed1935ff-624b-44a8-b55f-097c9bcdbcb5 default }" containerID=1a9636f0547f99f6c6d1d517271b302aeae3c2c556d0ddf80df9201d6eb508ee datapathConfiguration="&{false false false false false }" interface=lxc1f90e0a6f49d k8sPodName=openstack/nova-ks-service-ppmcv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a9636f054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/nova-ks-service-ppmcv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a9636f054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c1d8390b-c8dc-462e-af79-48ba1dd8acc5,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=c1d8390b-c8dc-462e-af79-48ba1dd8acc5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/nova-ks-service-ppmcv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=c1d8390b-c8dc-462e-af79-48ba1dd8acc5;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=c1d8390b-c8dc-462e-af79-48ba1dd8acc5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a9636f054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=58167 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c1d8390b-c8dc-462e-af79-48ba1dd8acc5,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=c1d8390b-c8dc-462e-af79-48ba1dd8acc5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/nova-ks-service-ppmcv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1a9636f054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=58167 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/nova-ks-service-ppmcv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a9636f054 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=913 identity=58167 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/nova-ks-service-ppmcv subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a9636f054 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=913 identity=58167 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/nova-ks-service-ppmcv subsys=daemon level=info msg="Delete endpoint request" containerID=1a9636f054 endpointID=913 k8sNamespace=openstack k8sPodName=nova-ks-service-ppmcv subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=c1d8390b-c8dc-462e-af79-48ba1dd8acc5 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=c1d8390b-c8dc-462e-af79-48ba1dd8acc5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=1a9636f054 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=913 identity=58167 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/nova-ks-service-ppmcv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 71bb4fda-583f-4e9a-83b1-439a47c9cb7e default }" containerID=cd1a06bcdc49a730d41c47e75f104c447360c2afea1dc4112be5901a8893345f datapathConfiguration="&{false false false false false }" interface=lxc1cb28f250b7e k8sPodName=openstack/nova-ks-endpoints-t4bfk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd1a06bcdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4bfk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd1a06bcdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9fd9618f-b4e7-4b05-bc00-e520dba07d04,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9fd9618f-b4e7-4b05-bc00-e520dba07d04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4bfk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=9fd9618f-b4e7-4b05-bc00-e520dba07d04;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=9fd9618f-b4e7-4b05-bc00-e520dba07d04;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=cd1a06bcdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4bfk line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cd1a06bcdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=27632 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9fd9618f-b4e7-4b05-bc00-e520dba07d04,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9fd9618f-b4e7-4b05-bc00-e520dba07d04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4bfk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd1a06bcdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=27632 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4bfk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd1a06bcdc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1405 identity=27632 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4bfk subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd1a06bcdc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1405 identity=27632 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4bfk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cd1a06bcdc endpointID=1405 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-t4bfk subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=9fd9618f-b4e7-4b05-bc00-e520dba07d04 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=9fd9618f-b4e7-4b05-bc00-e520dba07d04 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=cd1a06bcdc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1405 identity=27632 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4bfk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 97436f73-edcd-47f5-beae-bcca1747024d default }" containerID=514468f37aa39848b84a97f7cf71baaacae3daa3583338c2be54d72b054ea9c6 datapathConfiguration="&{false false false false false }" interface=lxcbe888c5f3cb5 k8sPodName=openstack/nova-ks-user-4c8wr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=514468f37a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-ks-user-4c8wr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=514468f37a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=eba01699-9a4d-4434-a563-4f1a78051787,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=eba01699-9a4d-4434-a563-4f1a78051787,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-ks-user-4c8wr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=514468f37a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-ks-user-4c8wr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=eba01699-9a4d-4434-a563-4f1a78051787;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=eba01699-9a4d-4434-a563-4f1a78051787;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=514468f37a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identity=21914 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=eba01699-9a4d-4434-a563-4f1a78051787,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=eba01699-9a4d-4434-a563-4f1a78051787,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-ks-user-4c8wr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=514468f37a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identity=21914 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-ks-user-4c8wr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=514468f37a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=945 identity=21914 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-ks-user-4c8wr subsys=endpoint level=info msg="Successful endpoint creation" containerID=514468f37a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=945 identity=21914 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-ks-user-4c8wr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=514468f37a endpointID=945 k8sNamespace=openstack k8sPodName=nova-ks-user-4c8wr subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=eba01699-9a4d-4434-a563-4f1a78051787 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=eba01699-9a4d-4434-a563-4f1a78051787 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=514468f37a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=945 identity=21914 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-ks-user-4c8wr subsys=endpoint level=info msg="Delete endpoint request" containerID=1c5672cf06 endpointID=985 k8sNamespace=openstack k8sPodName=nova-bootstrap-8r7cd subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=208831c9-bc88-4abe-ad9d-85e4bcd9c8ab k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=208831c9-bc88-4abe-ad9d-85e4bcd9c8ab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=1c5672cf06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=985 identity=7507 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/nova-bootstrap-8r7cd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 f0f59c39-941a-404b-bd00-fc8c492f2c97 default }" containerID=79008472ccce45724c99461450aa5dd1be66dc781798c8ba4d73518be779c712 datapathConfiguration="&{false false false false false }" interface=lxc4652dbedf1a8 k8sPodName=local-path-storage/helper-pod-create-pvc-a3324273-2ab9-4349-a7dc-f14b8ea75022 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79008472cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 ipv4=10.0.0.21 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3324273-2ab9-4349-a7dc-f14b8ea75022 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79008472cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.21 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3324273-2ab9-4349-a7dc-f14b8ea75022 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79008472cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=25051 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.21 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3324273-2ab9-4349-a7dc-f14b8ea75022 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79008472cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=25051 ipv4=10.0.0.21 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3324273-2ab9-4349-a7dc-f14b8ea75022 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79008472cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=571 identity=25051 ipv4=10.0.0.21 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3324273-2ab9-4349-a7dc-f14b8ea75022 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79008472cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=571 identity=25051 ipv4=10.0.0.21 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3324273-2ab9-4349-a7dc-f14b8ea75022 subsys=daemon level=info msg="Delete endpoint request" containerID=79008472cc endpointID=571 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a3324273-2ab9-4349-a7dc-f14b8ea75022 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=79008472cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=571 identity=25051 ipv4=10.0.0.21 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3324273-2ab9-4349-a7dc-f14b8ea75022 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 ff2ef159-67ca-4989-8e36-7777bc996dc8 default }" containerID=0ce02db5e482a00521879e2bc0cb8995b1b334ac9aa8a0f8c19f7c6cb35d0f6a datapathConfiguration="&{false false false false false }" interface=lxc998d1fbbd258 k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ce02db5e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ce02db5e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ce02db5e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 identity=58682 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0ce02db5e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 identity=58682 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ce02db5e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1313 identity=58682 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ce02db5e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1313 identity=58682 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.29 4f3f1563-3524-4042-9549-437257dcc64d default }" containerID=4f298d371c6db39c6cd8f3e8ea7c7e8dce9d4d1e5f7bd4318c0431b634a91fd4 datapathConfiguration="&{false false false false false }" interface=lxcb91da5c9eba3 k8sPodName=openstack/neutron-rpc-server-54b7b9544b-pgstx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f298d371c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-rpc-server-54b7b9544b-pgstx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f298d371c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-rpc-server-54b7b9544b-pgstx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f298d371c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identity=27743 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-rpc-server-54b7b9544b-pgstx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f298d371c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identity=27743 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-rpc-server-54b7b9544b-pgstx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 e0b20163-fdb4-4ac6-8de4-2643419c4494 default }" containerID=6462750e3bef951e49f0f2a60589347fd94a850ebdd651bff3fcf667bb5478fa datapathConfiguration="&{false false false false false }" interface=lxc16742c7aff17 k8sPodName=openstack/neutron-server-6f46474cdc-6qwh2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6462750e3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/neutron-server-6f46474cdc-6qwh2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6462750e3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/neutron-server-6f46474cdc-6qwh2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6462750e3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identity=11443 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/neutron-server-6f46474cdc-6qwh2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6462750e3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identity=11443 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/neutron-server-6f46474cdc-6qwh2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 f7600430-b836-4829-8353-e0bd41f029c9 default }" containerID=25164d7869f19b433940d9c00c3ad85d2e27edc610ae9015058568e334cf530d datapathConfiguration="&{false false false false false }" interface=lxcf7700927b8e8 k8sPodName=openstack/neutron-db-init-xfmgk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25164d7869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-db-init-xfmgk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25164d7869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=6b236cc5-8cc4-4de4-b77d-29fc1cb7e46d,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=6b236cc5-8cc4-4de4-b77d-29fc1cb7e46d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-db-init-xfmgk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=6b236cc5-8cc4-4de4-b77d-29fc1cb7e46d;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=6b236cc5-8cc4-4de4-b77d-29fc1cb7e46d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25164d7869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 identity=15915 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=6b236cc5-8cc4-4de4-b77d-29fc1cb7e46d,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=6b236cc5-8cc4-4de4-b77d-29fc1cb7e46d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-db-init-xfmgk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25164d7869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 identity=15915 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-db-init-xfmgk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f298d371c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=307 identity=27743 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-rpc-server-54b7b9544b-pgstx subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f298d371c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=307 identity=27743 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/neutron-rpc-server-54b7b9544b-pgstx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6462750e3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=271 identity=11443 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/neutron-server-6f46474cdc-6qwh2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6462750e3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=271 identity=11443 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/neutron-server-6f46474cdc-6qwh2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=25164d7869 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1044 identity=15915 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-db-init-xfmgk subsys=endpoint level=info msg="Successful endpoint creation" containerID=25164d7869 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1044 identity=15915 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-db-init-xfmgk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=25164d7869 endpointID=1044 k8sNamespace=openstack k8sPodName=neutron-db-init-xfmgk subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=6b236cc5-8cc4-4de4-b77d-29fc1cb7e46d k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=6b236cc5-8cc4-4de4-b77d-29fc1cb7e46d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=25164d7869 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1044 identity=15915 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/neutron-db-init-xfmgk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 0fa34382-6ea8-4029-ba38-e717f2ee1c38 default }" containerID=23af4df4016302568d5629c470bc883740b57c094c38884d337681f654e04434 datapathConfiguration="&{false false false false false }" interface=lxc76267ac4fb31 k8sPodName=openstack/neutron-db-sync-nq98r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23af4df401 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/neutron-db-sync-nq98r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23af4df401 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=a346a14b-c89a-46a7-8bb8-ca5ff5267510,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=a346a14b-c89a-46a7-8bb8-ca5ff5267510,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/neutron-db-sync-nq98r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=a346a14b-c89a-46a7-8bb8-ca5ff5267510;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=a346a14b-c89a-46a7-8bb8-ca5ff5267510;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=23af4df401 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.64 ipv6= k8sPodName=openstack/neutron-db-sync-nq98r line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=23af4df401 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 identity=47573 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=a346a14b-c89a-46a7-8bb8-ca5ff5267510,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=a346a14b-c89a-46a7-8bb8-ca5ff5267510,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/neutron-db-sync-nq98r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23af4df401 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 identity=47573 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/neutron-db-sync-nq98r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23af4df401 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1822 identity=47573 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/neutron-db-sync-nq98r subsys=endpoint level=info msg="Successful endpoint creation" containerID=23af4df401 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1822 identity=47573 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/neutron-db-sync-nq98r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=23af4df401 endpointID=1822 k8sNamespace=openstack k8sPodName=neutron-db-sync-nq98r subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=a346a14b-c89a-46a7-8bb8-ca5ff5267510 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=a346a14b-c89a-46a7-8bb8-ca5ff5267510 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=23af4df401 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1822 identity=47573 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/neutron-db-sync-nq98r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 70dcc5b1-0354-441d-8bf4-a93fb745099b default }" containerID=177cedc62815da27730d40651054a9752647b00d322e66c64996d768e246a91c datapathConfiguration="&{false false false false false }" interface=lxc6d6b1400efee k8sPodName=openstack/neutron-rabbit-init-vwnmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=177cedc628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/neutron-rabbit-init-vwnmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=177cedc628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=c1f5bd57-7a92-4a2c-b863-ad4778a1242f,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c1f5bd57-7a92-4a2c-b863-ad4778a1242f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/neutron-rabbit-init-vwnmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=c1f5bd57-7a92-4a2c-b863-ad4778a1242f;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c1f5bd57-7a92-4a2c-b863-ad4778a1242f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=177cedc628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=24111 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=c1f5bd57-7a92-4a2c-b863-ad4778a1242f,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c1f5bd57-7a92-4a2c-b863-ad4778a1242f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/neutron-rabbit-init-vwnmc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=177cedc628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=24111 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/neutron-rabbit-init-vwnmc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=177cedc628 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=512 identity=24111 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/neutron-rabbit-init-vwnmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=177cedc628 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=512 identity=24111 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/neutron-rabbit-init-vwnmc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=177cedc628 endpointID=512 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-vwnmc subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=c1f5bd57-7a92-4a2c-b863-ad4778a1242f k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c1f5bd57-7a92-4a2c-b863-ad4778a1242f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=177cedc628 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=512 identity=24111 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/neutron-rabbit-init-vwnmc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 a14fb1da-d6df-48b5-a8b7-d785249c7900 default }" containerID=d600a667b1cc11989057e7fcc36996779cc80c079f8c3cc3aeb04b23338e176d datapathConfiguration="&{false false false false false }" interface=lxc60ca1e5fd478 k8sPodName=openstack/neutron-ks-service-j772k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d600a667b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1257 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-ks-service-j772k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d600a667b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1257 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=6335e9b4-4b1d-4ee2-8da0-be312ee244d1,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=6335e9b4-4b1d-4ee2-8da0-be312ee244d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-ks-service-j772k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=6335e9b4-4b1d-4ee2-8da0-be312ee244d1;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=6335e9b4-4b1d-4ee2-8da0-be312ee244d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d600a667b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1257 identity=23052 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=6335e9b4-4b1d-4ee2-8da0-be312ee244d1,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=6335e9b4-4b1d-4ee2-8da0-be312ee244d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-ks-service-j772k oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d600a667b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1257 identity=23052 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-ks-service-j772k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d600a667b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1257 identity=23052 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-ks-service-j772k subsys=endpoint level=info msg="Successful endpoint creation" containerID=d600a667b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1257 identity=23052 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-ks-service-j772k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d600a667b1 endpointID=1257 k8sNamespace=openstack k8sPodName=neutron-ks-service-j772k subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=6335e9b4-4b1d-4ee2-8da0-be312ee244d1 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=6335e9b4-4b1d-4ee2-8da0-be312ee244d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=d600a667b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1257 identity=23052 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-ks-service-j772k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 68a463ff-a79c-4324-904d-001ce3af4d8a default }" containerID=5d79d14c37c141dfcc7a729c0e728f01ed609aacca0210e442e32af072959a56 datapathConfiguration="&{false false false false false }" interface=lxc1a3bd04b17a8 k8sPodName=openstack/neutron-ks-endpoints-tfp5h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d79d14c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tfp5h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d79d14c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=261b8d6c-f3ab-44b9-9255-4bd609afb466,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=261b8d6c-f3ab-44b9-9255-4bd609afb466,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tfp5h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=261b8d6c-f3ab-44b9-9255-4bd609afb466;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=261b8d6c-f3ab-44b9-9255-4bd609afb466;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d79d14c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identity=60814 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=261b8d6c-f3ab-44b9-9255-4bd609afb466,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=261b8d6c-f3ab-44b9-9255-4bd609afb466,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tfp5h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d79d14c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identity=60814 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tfp5h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5d79d14c37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=134 identity=60814 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tfp5h subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d79d14c37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=134 identity=60814 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tfp5h subsys=daemon level=info msg="Delete endpoint request" containerID=5d79d14c37 endpointID=134 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-tfp5h subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=261b8d6c-f3ab-44b9-9255-4bd609afb466 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=261b8d6c-f3ab-44b9-9255-4bd609afb466 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=5d79d14c37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=134 identity=60814 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/neutron-ks-endpoints-tfp5h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 2157dc32-443a-40f9-a88a-1b4a1d795eba default }" containerID=d79222a6c852d658acc72f5cdb4a3a316d2b1a062691aa25056b5ee2bf82993d datapathConfiguration="&{false false false false false }" interface=lxc2b169b806b93 k8sPodName=openstack/neutron-ks-user-hqhkz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d79222a6c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2240 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/neutron-ks-user-hqhkz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d79222a6c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2240 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=b1d5eba9-b0cc-46e5-aa5c-99ebb8a3ad83,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=b1d5eba9-b0cc-46e5-aa5c-99ebb8a3ad83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/neutron-ks-user-hqhkz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=b1d5eba9-b0cc-46e5-aa5c-99ebb8a3ad83;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=b1d5eba9-b0cc-46e5-aa5c-99ebb8a3ad83;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d79222a6c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2240 identity=4907 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=b1d5eba9-b0cc-46e5-aa5c-99ebb8a3ad83,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=b1d5eba9-b0cc-46e5-aa5c-99ebb8a3ad83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/neutron-ks-user-hqhkz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d79222a6c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2240 identity=4907 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/neutron-ks-user-hqhkz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d79222a6c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2240 identity=4907 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/neutron-ks-user-hqhkz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d79222a6c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2240 identity=4907 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/neutron-ks-user-hqhkz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d79222a6c8 endpointID=2240 k8sNamespace=openstack k8sPodName=neutron-ks-user-hqhkz subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=b1d5eba9-b0cc-46e5-aa5c-99ebb8a3ad83 k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=b1d5eba9-b0cc-46e5-aa5c-99ebb8a3ad83 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=d79222a6c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2240 identity=4907 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/neutron-ks-user-hqhkz subsys=endpoint