level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="809.015µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="67.881µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="725.774µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.01µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=98.065486ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.47µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="34.741µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="72.431µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="72.382µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="85.682µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="492.82µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.28µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.877234ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.864597ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="43.081µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="51.271µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="247.864µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="121.203µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="77.242µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=66.507362ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="580.391µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.86µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.216.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.08989ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.901µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.846451ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="35.511µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.401401ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="8.63µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="5.411µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="34.76µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="16.431µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="58.901µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="349.327µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.571µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="306.186µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="974.519µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.397646ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.02µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="29.02µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.216 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.216 ipAddr.ipv6="" k8sNodeIP=199.204.45.216 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.216" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.190" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.216" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.216} {CiliumInternalIP 10.0.0.190}] 10.0.0.0/24 [] [] 10.0.0.67 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:43523" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.385772411s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="20.63µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.64µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="41.29µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="9.921µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.473817118s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=303.203889ms file-path=/var/run/cilium/state/templates/b0398ec88b2e6aefa4a04f4e0dd8a5cb6771f3d7574861c3538f63c46016deec/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3135 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2879 ipv4=10.0.0.67 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2879 identityLabels="reserved:health" ipv4=10.0.0.67 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2879 identity=4 identityLabels="reserved:health" ipv4=10.0.0.67 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.093583201s file-path=/var/run/cilium/state/templates/2f6c47ecb6d1715574f9e7ef028aa71298f195e57d37aaa0767f37f46a0c1822/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2879 identity=4 ipv4=10.0.0.67 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 b9e22f21-70ad-4d55-bc41-6a92dac48fcf default }" containerID=1ab9436c6a1152ede0422af664fee1d6b0bb8a0184b0f95b67b59ef4f5e56713 datapathConfiguration="&{false false false false false }" interface=lxc5695513857d9 k8sPodName=kube-system/coredns-7c96b6546b-jtrnx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ab9436c6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jtrnx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 289347c7-a924-4179-b62e-654c643753a1 default }" containerID=3a7d3482b9eafd7067b802962a27164eda5c5dcd3f358910f5cee7cd066af957 datapathConfiguration="&{false false false false false }" interface=lxc94da6a090724 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-n2zgx labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=1ab9436c6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jtrnx subsys=endpoint level=info msg="New endpoint" containerID=3a7d3482b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-n2zgx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=3a7d3482b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=adb927e4-880e-4145-8d45-ede06b6b7e24,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=adb927e4-880e-4145-8d45-ede06b6b7e24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-n2zgx subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=1ab9436c6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identity=50680 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jtrnx oldIdentity="no identity" subsys=endpoint level=info msg="Invalid state transition skipped" containerID=3a7d3482b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-n2zgx line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ab9436c6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identity=50680 ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jtrnx subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=adb927e4-880e-4145-8d45-ede06b6b7e24;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=adb927e4-880e-4145-8d45-ede06b6b7e24;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a7d3482b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 identity=1554 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=adb927e4-880e-4145-8d45-ede06b6b7e24,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=adb927e4-880e-4145-8d45-ede06b6b7e24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-n2zgx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a7d3482b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 identity=1554 ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-n2zgx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a7d3482b9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3289 identity=1554 ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-n2zgx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a7d3482b9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3289 identity=1554 ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-n2zgx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1ab9436c6a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=989 identity=50680 ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jtrnx subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ab9436c6a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=989 identity=50680 ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jtrnx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a7d3482b9 endpointID=3289 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-n2zgx subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=adb927e4-880e-4145-8d45-ede06b6b7e24 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=adb927e4-880e-4145-8d45-ede06b6b7e24 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=3a7d3482b9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3289 identity=1554 ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-n2zgx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 d0c2e01a-0cb8-4b43-a889-72fb17ac10ce default }" containerID=e9ce395358cc8febb9401cd3ec386a56792d57c77738d074e2a623ee2f175dd0 datapathConfiguration="&{false false false false false }" interface=lxc3863d295d251 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7q8ch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9ce395358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 ipv4=10.0.0.239 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7q8ch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9ce395358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.239 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7q8ch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e9ce395358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7q8ch line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e9ce395358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=53422 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.239 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7q8ch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9ce395358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=53422 ipv4=10.0.0.239 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7q8ch subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9ce395358 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=934 identity=53422 ipv4=10.0.0.239 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7q8ch subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9ce395358 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=934 identity=53422 ipv4=10.0.0.239 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7q8ch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3135 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03135 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03135 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03135 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03135:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3135 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 14015501-feff-4b9c-ab13-dffd550ba587 default }" containerID=6e7bf82acd63eea6abc59517c08018cdf10d0d20f944bd9aa40ead9d247fe4fb datapathConfiguration="&{false false false false false }" interface=lxcc60b18aaa30b k8sPodName=kube-system/coredns-67659f764b-hrt5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e7bf82acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 ipv4=10.0.0.5 ipv6= k8sPodName=kube-system/coredns-67659f764b-hrt5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e7bf82acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.5 ipv6= k8sPodName=kube-system/coredns-67659f764b-hrt5r subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6e7bf82acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identity=50680 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.5 ipv6= k8sPodName=kube-system/coredns-67659f764b-hrt5r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e7bf82acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identity=50680 ipv4=10.0.0.5 ipv6= k8sPodName=kube-system/coredns-67659f764b-hrt5r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 21a0c96a-03ff-42dc-9d92-b8684a8b323e default }" containerID=994c219e151f89b0c9a58562b80699e3bd132ac119e9a1052a3547162c1f303e datapathConfiguration="&{false false false false false }" interface=lxc8fb2aabab676 k8sPodName=kube-system/coredns-67659f764b-86zbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=994c219e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-86zbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=994c219e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-86zbn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=994c219e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=50680 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-86zbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=994c219e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=50680 ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-86zbn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e7bf82acd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=897 identity=50680 ipv4=10.0.0.5 ipv6= k8sPodName=kube-system/coredns-67659f764b-hrt5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e7bf82acd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=897 identity=50680 ipv4=10.0.0.5 ipv6= k8sPodName=kube-system/coredns-67659f764b-hrt5r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=994c219e15 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=191 identity=50680 ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-86zbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=994c219e15 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=191 identity=50680 ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-86zbn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.43 188e9754-0b37-49f1-b1f3-ea3483373d07 default }" containerID=73253d2a555827333ba6278f5063ade80aeb622a0fbd1417843f920f244c32f9 datapathConfiguration="&{false false false false false }" interface=lxcb3bf0787bc76 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5sx6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73253d2a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5sx6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73253d2a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5sx6p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=73253d2a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5sx6p line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=73253d2a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=17066 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5sx6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73253d2a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=17066 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5sx6p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73253d2a55 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=106 identity=17066 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5sx6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=73253d2a55 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=106 identity=17066 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5sx6p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ab9436c6a endpointID=989 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-jtrnx subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=1ab9436c6a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=989 identity=50680 ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jtrnx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 faf1e440-c399-4f1d-8d89-2bd6de992fc4 default }" containerID=10b0dacbd639852f0b90e41b06f37b8377fd20aac8310d878ccad2ce2402b06d datapathConfiguration="&{false false false false false }" interface=lxcec1af55aef5d k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7lpdp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10b0dacbd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7lpdp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10b0dacbd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7lpdp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10b0dacbd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 identity=35944 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7lpdp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=10b0dacbd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 identity=35944 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7lpdp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 0c7aef86-1f69-4d23-8511-1b4dfee3224d default }" containerID=98bd06d88618ded0aa734597a94429a1477bef3cf1a1e34a9bf54ca0dd9cfa1d datapathConfiguration="&{false false false false false }" interface=lxc32a62b129a9f k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rkpg8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98bd06d886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rkpg8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98bd06d886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rkpg8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98bd06d886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=55422 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rkpg8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98bd06d886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=55422 ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rkpg8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 c685f092-1009-4582-a854-00e4ecad9616 default }" containerID=a1a5159267cef87c87cebe8ad7934b661c2d389b9cf4cff83a0ab0d3f180213c datapathConfiguration="&{false false false false false }" interface=lxc850d1b7d1710 k8sPodName=cert-manager/cert-manager-75c4c745bc-sqj84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1a5159267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sqj84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1a5159267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sqj84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1a5159267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 identity=58595 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sqj84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1a5159267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 identity=58595 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sqj84 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98bd06d886 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=593 identity=55422 ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rkpg8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98bd06d886 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=593 identity=55422 ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rkpg8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=10b0dacbd6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2378 identity=35944 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7lpdp subsys=endpoint level=info msg="Successful endpoint creation" containerID=10b0dacbd6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2378 identity=35944 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7lpdp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a1a5159267 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2789 identity=58595 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sqj84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1a5159267 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2789 identity=58595 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sqj84 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.44 b3e8f9c6-cd17-4639-8f3c-ba8e727e0b45 default }" containerID=d897ecb719314ec9458c0f4f1868d9bfab38fd3f8bac4fc9a3510025f8d4ecf2 datapathConfiguration="&{false false false false false }" interface=lxc3e946fe83f89 k8sPodName=cert-manager/cert-manager-startupapicheck-qmrgc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d897ecb719 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qmrgc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d897ecb719 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=164b6626-7b71-4a8f-9a39-d8ebb79ca18c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=164b6626-7b71-4a8f-9a39-d8ebb79ca18c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qmrgc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=164b6626-7b71-4a8f-9a39-d8ebb79ca18c;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=164b6626-7b71-4a8f-9a39-d8ebb79ca18c;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d897ecb719 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identity=23591 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=164b6626-7b71-4a8f-9a39-d8ebb79ca18c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=164b6626-7b71-4a8f-9a39-d8ebb79ca18c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qmrgc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d897ecb719 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identity=23591 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qmrgc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d897ecb719 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2751 identity=23591 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qmrgc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d897ecb719 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2751 identity=23591 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qmrgc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d897ecb719 endpointID=2751 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-qmrgc subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=164b6626-7b71-4a8f-9a39-d8ebb79ca18c k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=164b6626-7b71-4a8f-9a39-d8ebb79ca18c k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=d897ecb719 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2751 identity=23591 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qmrgc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 067a43a7-cc5d-44de-9e98-4d5dfd9d1fa4 default }" containerID=b4f62960cd3bacaaa99d437a525dca759a42f32650257034779da822d59e16b4 datapathConfiguration="&{false false false false false }" interface=lxcba461d994862 k8sPodName=ingress-nginx/ingress-nginx-admission-create-c29t4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4f62960cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c29t4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4f62960cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bd5db88d-172a-4cc4-a4f1-7dc9a2fec771,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bd5db88d-172a-4cc4-a4f1-7dc9a2fec771,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c29t4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=bd5db88d-172a-4cc4-a4f1-7dc9a2fec771;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=bd5db88d-172a-4cc4-a4f1-7dc9a2fec771;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4f62960cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identity=25918 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bd5db88d-172a-4cc4-a4f1-7dc9a2fec771,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bd5db88d-172a-4cc4-a4f1-7dc9a2fec771,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c29t4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4f62960cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identity=25918 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c29t4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b4f62960cd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=385 identity=25918 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c29t4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4f62960cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=385 identity=25918 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c29t4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4f62960cd endpointID=385 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-c29t4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=bd5db88d-172a-4cc4-a4f1-7dc9a2fec771 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=bd5db88d-172a-4cc4-a4f1-7dc9a2fec771 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=b4f62960cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=385 identity=25918 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c29t4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 b956a2c2-a948-4692-a7b4-017f2f2dc6df default }" containerID=5e80b80a1014529034702ac6deb51dad19403a24e9914f7d284b04d4b52d7959 datapathConfiguration="&{false false false false false }" interface=lxcf3e8b72c565e k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hk2bq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e80b80a10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3442 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hk2bq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e80b80a10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3442 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hk2bq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e80b80a10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3442 identity=52795 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hk2bq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5e80b80a10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3442 identity=52795 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hk2bq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e80b80a10 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3442 identity=52795 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hk2bq subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e80b80a10 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3442 identity=52795 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hk2bq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.79 a70a5fd2-d967-4581-9077-8438e9b7b891 default }" containerID=0ff0627a9249c934e39594675b93e4547fd2df2952ff3cafe9ccbd386f8fe7d1 datapathConfiguration="&{false false false false false }" interface=lxc2f344c25b3e9 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-npc6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ff0627a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 ipv4=10.0.0.79 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-npc6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ff0627a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=08cebb56-e459-4ed2-a0b5-783b94ddd263,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=08cebb56-e459-4ed2-a0b5-783b94ddd263,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.79 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-npc6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=08cebb56-e459-4ed2-a0b5-783b94ddd263;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=08cebb56-e459-4ed2-a0b5-783b94ddd263;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ff0627a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identity=21603 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=08cebb56-e459-4ed2-a0b5-783b94ddd263,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=08cebb56-e459-4ed2-a0b5-783b94ddd263,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.79 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-npc6q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ff0627a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identity=21603 ipv4=10.0.0.79 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-npc6q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ff0627a92 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=834 identity=21603 ipv4=10.0.0.79 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-npc6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ff0627a92 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=834 identity=21603 ipv4=10.0.0.79 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-npc6q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ff0627a92 endpointID=834 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-npc6q subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=08cebb56-e459-4ed2-a0b5-783b94ddd263 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=08cebb56-e459-4ed2-a0b5-783b94ddd263 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=0ff0627a92 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=834 identity=21603 ipv4=10.0.0.79 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-npc6q subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=62e82585-fa86-4118-a520-c4ae027ca655] Description:}]" policyAddRequest=02763275-4416-4370-98b3-5e3fa28f86e6 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=02763275-4416-4370-98b3-5e3fa28f86e6 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=466a93d2-5f14-449a-9253-4b7fbd6cb6dc] Description:}]" policyAddRequest=4b16c026-8a96-421f-8f2a-900d1f1a193e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4b16c026-8a96-421f-8f2a-900d1f1a193e policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.55 108123d0-41a6-4d23-97fd-0a0982d01e7d default }" containerID=b450c957945f9664007394e9fe1f985b717a0c48961b6e12f67bd1bc2d03e16b datapathConfiguration="&{false false false false false }" interface=lxcaa42ee10210b k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-tv2lj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b450c95794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-tv2lj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b450c95794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-tv2lj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b450c95794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identity=6714 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-tv2lj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b450c95794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identity=6714 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-tv2lj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b450c95794 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=947 identity=6714 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-tv2lj subsys=endpoint level=info msg="Successful endpoint creation" containerID=b450c95794 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=947 identity=6714 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-tv2lj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.16 2fde5b7e-d662-4eab-9e91-f5eee7ee7d35 default }" containerID=03b5c48adb1f341b7ff0a6f5b4f839cfea32f874540954a15d3ffde475789c54 datapathConfiguration="&{false false false false false }" interface=lxc1286f3768632 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pjcfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03b5c48adb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pjcfq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03b5c48adb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pjcfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03b5c48adb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identity=58171 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pjcfq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03b5c48adb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identity=58171 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pjcfq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03b5c48adb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=813 identity=58171 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pjcfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=03b5c48adb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=813 identity=58171 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pjcfq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 a0d3b85c-0e0c-44e5-9d92-95abc1cc44b0 default }" containerID=2d584e3f7c2c54b7be46489c870bf39074c55c24b3411234392103dca02e7543 datapathConfiguration="&{false false false false false }" interface=lxc914b7071f96f k8sPodName=openstack/pxc-operator-7cff949c8b-ddj6n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d584e3f7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-ddj6n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d584e3f7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-ddj6n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d584e3f7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 identity=5346 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-ddj6n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d584e3f7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 identity=5346 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-ddj6n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d584e3f7c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1857 identity=5346 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-ddj6n subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d584e3f7c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1857 identity=5346 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-ddj6n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.182 09edf6d8-dd2e-4c92-8751-80d29cee48a0 default }" containerID=003a56721eb936935b49dff06615ea344f0a20bced06cd9a84fca2b4ac2a8c80 datapathConfiguration="&{false false false false false }" interface=lxc195e5c7b4e93 k8sPodName=local-path-storage/helper-pod-create-pvc-434a7940-b546-4089-861f-760d151adc65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=003a56721e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2796 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-434a7940-b546-4089-861f-760d151adc65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=003a56721e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2796 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-434a7940-b546-4089-861f-760d151adc65 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=003a56721e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2796 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-434a7940-b546-4089-861f-760d151adc65 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=003a56721e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2796 identity=19001 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-434a7940-b546-4089-861f-760d151adc65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=003a56721e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2796 identity=19001 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-434a7940-b546-4089-861f-760d151adc65 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=003a56721e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2796 identity=19001 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-434a7940-b546-4089-861f-760d151adc65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=003a56721e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2796 identity=19001 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-434a7940-b546-4089-861f-760d151adc65 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.133 4d43e9f2-7b54-47ba-8c86-847c6c5207d9 default }" containerID=20bba4bb7c8b445ae69fe7787cf0db2463356223b2c093cd52b23593ca66325b datapathConfiguration="&{false false false false false }" interface=lxc671f9f63bfc2 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20bba4bb7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20bba4bb7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20bba4bb7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identity=47894 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20bba4bb7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identity=47894 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20bba4bb7c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1292 identity=47894 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=20bba4bb7c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1292 identity=47894 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=003a56721e endpointID=2796 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-434a7940-b546-4089-861f-760d151adc65 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=003a56721e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2796 identity=19001 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-434a7940-b546-4089-861f-760d151adc65 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 5b87243a-a754-43b1-ba64-bf74db26a2da default }" containerID=74de036572675512f32823903eff3030555d6e4532c20c40aefc8440b4e5a5a5 datapathConfiguration="&{false false false false false }" interface=lxc97c4c0b9945d k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74de036572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74de036572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74de036572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=61085 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74de036572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=61085 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=74de036572 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=85 identity=61085 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74de036572 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=85 identity=61085 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=d597e2c3-a3b6-4e8a-8640-ab736815740f] Description:}]" policyAddRequest=05de1a18-2b3c-4caa-9e46-ce7e6317d091 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=05de1a18-2b3c-4caa-9e46-ce7e6317d091 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.82 9cf33e8f-3b9e-4d66-afb2-04b8f2a026d2 default }" containerID=15fdd5e8c2e07ed1638023c7d5755ce3e56314bd67426dd8f312e3110ab4956d datapathConfiguration="&{false false false false false }" interface=lxcd6daf1209357 k8sPodName=local-path-storage/helper-pod-create-pvc-3574b4b0-a3c6-484a-ad2e-58ffa56bb72b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15fdd5e8c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 ipv4=10.0.0.82 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3574b4b0-a3c6-484a-ad2e-58ffa56bb72b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15fdd5e8c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.82 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3574b4b0-a3c6-484a-ad2e-58ffa56bb72b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15fdd5e8c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identity=19001 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.82 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3574b4b0-a3c6-484a-ad2e-58ffa56bb72b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15fdd5e8c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identity=19001 ipv4=10.0.0.82 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3574b4b0-a3c6-484a-ad2e-58ffa56bb72b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15fdd5e8c2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1176 identity=19001 ipv4=10.0.0.82 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3574b4b0-a3c6-484a-ad2e-58ffa56bb72b subsys=endpoint level=info msg="Successful endpoint creation" containerID=15fdd5e8c2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1176 identity=19001 ipv4=10.0.0.82 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3574b4b0-a3c6-484a-ad2e-58ffa56bb72b subsys=daemon level=info msg="Delete endpoint request" containerID=15fdd5e8c2 endpointID=1176 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3574b4b0-a3c6-484a-ad2e-58ffa56bb72b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=15fdd5e8c2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1176 identity=19001 ipv4=10.0.0.82 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3574b4b0-a3c6-484a-ad2e-58ffa56bb72b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 3c7551bf-36cd-40c3-ada1-f85462282401 default }" containerID=ff898e8329a272c03f66163aada84665c2c9cc4c88b0292cc5935b8ddd2d8b18 datapathConfiguration="&{false false false false false }" interface=lxc6adfb9d641c7 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff898e8329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff898e8329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff898e8329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 identity=15309 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ff898e8329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 identity=15309 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff898e8329 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3141 identity=15309 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff898e8329 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3141 identity=15309 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=00fc7c59-6100-4a96-88e4-4612c3f2e47f] Description:}]" policyAddRequest=ea0e62f9-af19-436a-8055-b6afa2a5be5d subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=ea0e62f9-af19-436a-8055-b6afa2a5be5d policyRevision=5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.53 b295cd15-0af7-413b-865a-e926b97e5652 default }" containerID=48276b588626c0a9278911e9917bf46383cda33b0fd8bacfb8b56d9540fb844d datapathConfiguration="&{false false false false false }" interface=lxca34d571f14c6 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48276b5886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 ipv4=10.0.0.53 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48276b5886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.53 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48276b5886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identity=47083 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.53 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48276b5886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identity=47083 ipv4=10.0.0.53 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48276b5886 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=511 identity=47083 ipv4=10.0.0.53 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=48276b5886 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=511 identity=47083 ipv4=10.0.0.53 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009695375167394863 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.244 37b577ad-ced7-4b7b-94b7-167b0a0e69f6 default }" containerID=bdac9791a4a7034a38a1287e184817d2cbeacd0cb62a91f0e28d1a2165f954de datapathConfiguration="&{false false false false false }" interface=lxc8b908f9b337d k8sPodName=monitoring/node-feature-discovery-worker-48c5g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bdac9791a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-48c5g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bdac9791a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-48c5g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bdac9791a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-48c5g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bdac9791a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identity=64077 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-48c5g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bdac9791a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identity=64077 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-48c5g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bdac9791a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2728 identity=64077 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-48c5g subsys=endpoint level=info msg="Successful endpoint creation" containerID=bdac9791a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2728 identity=64077 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-48c5g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 1058cba1-70ba-4024-8d77-3173c553925a default }" containerID=41e327398592afe5b73d416b3aace21a36ef17ea702f515e4f938b548a7d4029 datapathConfiguration="&{false false false false false }" interface=lxc7226e1c45d35 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zf4z6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41e3273985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1723 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zf4z6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41e3273985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1723 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zf4z6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.128 ea0450fc-5e21-4c2e-b462-f3ddd63719c3 default }" containerID=11fdd50ed69ad1f1ea9f3e75ffab2e9700fb4184678de11f084e1212e5b9e8b7 datapathConfiguration="&{false false false false false }" interface=lxc27ae531ae363 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qx6bl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11fdd50ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qx6bl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11fdd50ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qx6bl subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41e3273985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1723 identity=1206 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zf4z6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41e3273985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1723 identity=1206 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zf4z6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11fdd50ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identity=37971 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qx6bl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11fdd50ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identity=37971 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qx6bl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11fdd50ed6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=515 identity=37971 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qx6bl subsys=endpoint level=info msg="Successful endpoint creation" containerID=11fdd50ed6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=515 identity=37971 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qx6bl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=41e3273985 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1723 identity=1206 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zf4z6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=41e3273985 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1723 identity=1206 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zf4z6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.40 80a4a58a-ddeb-4adc-a1d1-07c3eb006a40 default }" containerID=026acaf4711a93b48698ddd47d46aa9a51c6e64a822b585dc2ad9185f3e58f33 datapathConfiguration="&{false false false false false }" interface=lxc99957d0d989d k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4blsg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=026acaf471 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 ipv4=10.0.0.40 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4blsg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=026acaf471 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.40 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4blsg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=026acaf471 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=48608 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.40 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4blsg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=026acaf471 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=48608 ipv4=10.0.0.40 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4blsg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=026acaf471 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1204 identity=48608 ipv4=10.0.0.40 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4blsg subsys=endpoint level=info msg="Successful endpoint creation" containerID=026acaf471 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1204 identity=48608 ipv4=10.0.0.40 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4blsg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3135 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-181-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03135 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03135 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03135 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03135:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3135 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 c4afdcab-3781-4ef0-abec-680302a5453b default }" containerID=48c0c2243e6867336d9bf1735c258146760ec696d256a1bb604abb2bdbfd1232 datapathConfiguration="&{false false false false false }" interface=lxc587bb8c96313 k8sPodName=monitoring/kube-prometheus-stack-admission-create-p5999 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48c0c2243e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-p5999 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48c0c2243e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=95620cb6-7bd7-4ef7-9986-2e48911e2278,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=95620cb6-7bd7-4ef7-9986-2e48911e2278,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-p5999 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=95620cb6-7bd7-4ef7-9986-2e48911e2278;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=95620cb6-7bd7-4ef7-9986-2e48911e2278;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48c0c2243e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=10792 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=95620cb6-7bd7-4ef7-9986-2e48911e2278,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=95620cb6-7bd7-4ef7-9986-2e48911e2278,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-p5999 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48c0c2243e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=10792 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-p5999 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48c0c2243e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=154 identity=10792 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-p5999 subsys=endpoint level=info msg="Successful endpoint creation" containerID=48c0c2243e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=154 identity=10792 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-p5999 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48c0c2243e endpointID=154 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-p5999 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=95620cb6-7bd7-4ef7-9986-2e48911e2278 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=95620cb6-7bd7-4ef7-9986-2e48911e2278 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=48c0c2243e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=154 identity=10792 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-p5999 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 e87227f8-651c-4d56-b89c-50d1941eb23a default }" containerID=33a52d26d8a8f3f24b11e0f530c2c722568eb18b04b4746ba122baa1518b6a3f datapathConfiguration="&{false false false false false }" interface=lxc215da8c22ff4 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x6pqc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33a52d26d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1971 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x6pqc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33a52d26d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1971 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x6pqc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33a52d26d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1971 identity=54536 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x6pqc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=33a52d26d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1971 identity=54536 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x6pqc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 0f1a5f2c-cf58-487c-917a-a7b35d632fe5 default }" containerID=629659dda2fb922bd32ac80ad015c2cdedb49560386e708b445aafd2cf74ec87 datapathConfiguration="&{false false false false false }" interface=lxcc723c86df96d k8sPodName=monitoring/kube-prometheus-stack-grafana-5cb89c5cff-wjzvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=629659dda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cb89c5cff-wjzvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=629659dda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cb89c5cff-wjzvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=629659dda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identity=27221 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cb89c5cff-wjzvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=629659dda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identity=27221 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cb89c5cff-wjzvs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33a52d26d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1971 identity=54536 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x6pqc subsys=endpoint level=info msg="Successful endpoint creation" containerID=33a52d26d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1971 identity=54536 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x6pqc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.129 407c05dd-b40b-4a42-a3be-398a8e816def default }" containerID=03d78667f679e14b6d9a9ffa25d67092a4948d632792edb7ad11e548838c47f5 datapathConfiguration="&{false false false false false }" interface=lxca57a8ecc26dd k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-hx68x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03d78667f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-hx68x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03d78667f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-hx68x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03d78667f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=8873 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-hx68x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03d78667f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=8873 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-hx68x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=629659dda2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=448 identity=27221 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cb89c5cff-wjzvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=629659dda2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=448 identity=27221 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cb89c5cff-wjzvs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=03d78667f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=234 identity=8873 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-hx68x subsys=endpoint level=info msg="Successful endpoint creation" containerID=03d78667f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=234 identity=8873 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-hx68x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.168 575d0f97-ae30-457c-a330-6dec842252ed default }" containerID=6da63f84ba1e27368585f6ba21c773a5ce2ba8217f500bd1cfed179d5e5e1157 datapathConfiguration="&{false false false false false }" interface=lxcff96d73cb022 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sl4nd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6da63f84ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sl4nd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6da63f84ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=e5f49b7f-cbc4-48c9-9f05-c65c53f727e2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e5f49b7f-cbc4-48c9-9f05-c65c53f727e2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sl4nd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e5f49b7f-cbc4-48c9-9f05-c65c53f727e2;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e5f49b7f-cbc4-48c9-9f05-c65c53f727e2;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6da63f84ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 identity=45743 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=e5f49b7f-cbc4-48c9-9f05-c65c53f727e2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e5f49b7f-cbc4-48c9-9f05-c65c53f727e2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sl4nd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6da63f84ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 identity=45743 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sl4nd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6da63f84ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3413 identity=45743 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sl4nd subsys=endpoint level=info msg="Successful endpoint creation" containerID=6da63f84ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3413 identity=45743 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sl4nd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6da63f84ba endpointID=3413 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-sl4nd subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e5f49b7f-cbc4-48c9-9f05-c65c53f727e2 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e5f49b7f-cbc4-48c9-9f05-c65c53f727e2 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6da63f84ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3413 identity=45743 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sl4nd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 e9de7549-5bd9-4584-a1d8-bf9acdc9ed01 default }" containerID=78e7f6d32390b104e5655675d84f655f15a1f756f9293c0243064f37b6a6c356 datapathConfiguration="&{false false false false false }" interface=lxc9b8561171fc4 k8sPodName=local-path-storage/helper-pod-create-pvc-172e0ffe-5151-4730-b444-45300a11e4ef labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78e7f6d323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=522 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-172e0ffe-5151-4730-b444-45300a11e4ef subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78e7f6d323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=522 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-172e0ffe-5151-4730-b444-45300a11e4ef subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78e7f6d323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=522 identity=19001 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-172e0ffe-5151-4730-b444-45300a11e4ef oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78e7f6d323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=522 identity=19001 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-172e0ffe-5151-4730-b444-45300a11e4ef subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78e7f6d323 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=522 identity=19001 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-172e0ffe-5151-4730-b444-45300a11e4ef subsys=endpoint level=info msg="Successful endpoint creation" containerID=78e7f6d323 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=522 identity=19001 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-172e0ffe-5151-4730-b444-45300a11e4ef subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.215 2465f637-83f9-4928-aa85-0b028a358886 default }" containerID=e0a3272b013a0d7afeb402937ae4f256a5a5b354d509d45658d54bb7974fd750 datapathConfiguration="&{false false false false false }" interface=lxc2a76a913c64e k8sPodName=local-path-storage/helper-pod-create-pvc-cb6da2cc-0f33-48d1-8286-eabea6b585a6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0a3272b01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb6da2cc-0f33-48d1-8286-eabea6b585a6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0a3272b01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb6da2cc-0f33-48d1-8286-eabea6b585a6 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e0a3272b01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=19001 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb6da2cc-0f33-48d1-8286-eabea6b585a6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0a3272b01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=19001 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb6da2cc-0f33-48d1-8286-eabea6b585a6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0a3272b01 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=689 identity=19001 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb6da2cc-0f33-48d1-8286-eabea6b585a6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0a3272b01 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=689 identity=19001 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb6da2cc-0f33-48d1-8286-eabea6b585a6 subsys=daemon level=info msg="Delete endpoint request" containerID=78e7f6d323 endpointID=522 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-172e0ffe-5151-4730-b444-45300a11e4ef subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=78e7f6d323 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=522 identity=19001 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-172e0ffe-5151-4730-b444-45300a11e4ef subsys=endpoint level=info msg="Delete endpoint request" containerID=e0a3272b01 endpointID=689 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cb6da2cc-0f33-48d1-8286-eabea6b585a6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e0a3272b01 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=689 identity=19001 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb6da2cc-0f33-48d1-8286-eabea6b585a6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 688f3d6c-826b-4af2-915b-a614eee6baa7 default }" containerID=c36c7cd5806234885db4d6f2a98dc685ff9c26290de891bfe4a2389424f55ee9 datapathConfiguration="&{false false false false false }" interface=lxc17506ca7d908 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c36c7cd580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c36c7cd580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c36c7cd580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c36c7cd580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 identity=33500 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c36c7cd580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 identity=33500 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c36c7cd580 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=667 identity=33500 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c36c7cd580 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=667 identity=33500 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.253 1c51b1b6-a750-4fe5-bb72-4cf2293a7399 default }" containerID=ad412bb27ae0de87a79eda5182566e7efa3a31b529a44a6c5e0aab640418f230 datapathConfiguration="&{false false false false false }" interface=lxcf220fe5413e3 k8sPodName=monitoring/loki-gateway-cf54cb88c-dstmp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad412bb27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dstmp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad412bb27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dstmp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ad412bb27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identity=27407 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dstmp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad412bb27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identity=27407 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dstmp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 4825ac9b-2a7e-460f-b111-b2c8944554b4 default }" containerID=44f261367af0f821141621f410142fd3015751d0ac7d8c16804d36a6f2ab1c25 datapathConfiguration="&{false false false false false }" interface=lxcd6b8a04a0358 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44f261367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44f261367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44f261367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 identity=33092 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44f261367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 identity=33092 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 b3f10988-628d-49db-895f-d356fe939adb default }" containerID=aa23d6acc3be9c3d0cf967f60b00e64891ed234b958d7b5fa5fa6fb867945218 datapathConfiguration="&{false false false false false }" interface=lxc54b5199bcd1c k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa23d6acc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa23d6acc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa23d6acc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=30186 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa23d6acc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=30186 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad412bb27a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3902 identity=27407 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dstmp subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad412bb27a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3902 identity=27407 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dstmp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=44f261367a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2846 identity=33092 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=44f261367a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2846 identity=33092 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.194 086b30d4-c76f-4a05-977b-b451e91378d6 default }" containerID=e7b1e1126c1d8242a4c3a894564ca4c5bb0fa2a9a35e5a415e06ea219c4b16ef datapathConfiguration="&{false false false false false }" interface=lxc8566cd974ebd k8sPodName=local-path-storage/helper-pod-create-pvc-5d8eec2c-a2bd-456f-b4d8-34909deee3f9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7b1e1126c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5d8eec2c-a2bd-456f-b4d8-34909deee3f9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7b1e1126c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5d8eec2c-a2bd-456f-b4d8-34909deee3f9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7b1e1126c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=19001 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5d8eec2c-a2bd-456f-b4d8-34909deee3f9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7b1e1126c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=19001 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5d8eec2c-a2bd-456f-b4d8-34909deee3f9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa23d6acc3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1299 identity=30186 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa23d6acc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1299 identity=30186 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e7b1e1126c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=804 identity=19001 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5d8eec2c-a2bd-456f-b4d8-34909deee3f9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7b1e1126c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=19001 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5d8eec2c-a2bd-456f-b4d8-34909deee3f9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.72 75c958f3-853f-46a5-b33d-b70180d6771c default }" containerID=719cffa65fa60d6075426c14ac790436134f2d4c6b865c203d99d8ef3915480e datapathConfiguration="&{false false false false false }" interface=lxc1d64f4442615 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=719cffa65f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=719cffa65f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=719cffa65f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 identity=49742 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=719cffa65f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 identity=49742 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=719cffa65f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2115 identity=49742 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=719cffa65f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2115 identity=49742 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.198 171563fc-6d68-4489-b560-894f0b3e542d default }" containerID=b86a5b87fe3cd0a26248e207ce7ad8ab221971f822dbc6fb7c62188362f8c98e datapathConfiguration="&{false false false false false }" interface=lxcfc8828c8b425 k8sPodName=monitoring/vector-r9255 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b86a5b87fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/vector-r9255 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b86a5b87fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/vector-r9255 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Delete endpoint request" containerID=e7b1e1126c endpointID=804 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5d8eec2c-a2bd-456f-b4d8-34909deee3f9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b86a5b87fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 identity=57920 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/vector-r9255 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b86a5b87fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 identity=57920 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/vector-r9255 subsys=endpoint level=info msg="Removed endpoint" containerID=e7b1e1126c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=19001 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5d8eec2c-a2bd-456f-b4d8-34909deee3f9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b86a5b87fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2543 identity=57920 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/vector-r9255 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b86a5b87fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2543 identity=57920 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/vector-r9255 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.45 696904f4-46ba-482c-9d15-bdaffed9b40e default }" containerID=2942b51371f92237a1b2361aae8a6a9b296b1f3cc850187801c12decf933a0cd datapathConfiguration="&{false false false false false }" interface=lxc6821fb01a56b k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2942b51371 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2942b51371 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2942b51371 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 identity=50879 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2942b51371 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 identity=50879 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2942b51371 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1659 identity=50879 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2942b51371 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1659 identity=50879 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.13 7ebac7ef-496a-4f29-a3a6-b5ccb42abd5d default }" containerID=e38434dafc5e05606ea11a654192d575c7300595c686afc3007305a9fd8182d7 datapathConfiguration="&{false false false false false }" interface=lxc50f9944b7d89 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wdrxn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e38434dafc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wdrxn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e38434dafc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wdrxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e38434dafc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 identity=33315 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wdrxn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e38434dafc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 identity=33315 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wdrxn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e38434dafc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3413 identity=33315 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wdrxn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e38434dafc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3413 identity=33315 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wdrxn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.56 e8e28515-ddfc-4ad2-bf0c-c4246befca3e default }" containerID=a75b5b13c64e2a424e734091fae3deeab6f30f351773ecc20fbd79c1df852fa3 datapathConfiguration="&{false false false false false }" interface=lxc34b3ca122992 k8sPodName=openstack/memcached-memcached-6479589586-jh879 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a75b5b13c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jh879 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a75b5b13c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jh879 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a75b5b13c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 identity=4969 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jh879 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a75b5b13c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 identity=4969 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jh879 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a75b5b13c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3416 identity=4969 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jh879 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a75b5b13c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3416 identity=4969 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jh879 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.138 168ab9f3-bf14-4b9b-b4f0-c870e559e168 default }" containerID=9a8e1de7202feaf584a1f9fcc97cdf42d0399beda33a1989df23fc849e71305a datapathConfiguration="&{false false false false false }" interface=lxc460dd2ad678e k8sPodName=local-path-storage/helper-pod-create-pvc-b4b8727d-c742-43ac-9464-8b4d8e3a58a3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a8e1de720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1303 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4b8727d-c742-43ac-9464-8b4d8e3a58a3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a8e1de720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1303 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4b8727d-c742-43ac-9464-8b4d8e3a58a3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a8e1de720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1303 identity=19001 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4b8727d-c742-43ac-9464-8b4d8e3a58a3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a8e1de720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1303 identity=19001 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4b8727d-c742-43ac-9464-8b4d8e3a58a3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a8e1de720 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1303 identity=19001 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4b8727d-c742-43ac-9464-8b4d8e3a58a3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a8e1de720 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1303 identity=19001 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4b8727d-c742-43ac-9464-8b4d8e3a58a3 subsys=daemon level=info msg="Delete endpoint request" containerID=9a8e1de720 endpointID=1303 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b4b8727d-c742-43ac-9464-8b4d8e3a58a3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9a8e1de720 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1303 identity=19001 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4b8727d-c742-43ac-9464-8b4d8e3a58a3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 579f28a1-2e17-4301-a654-755be4fdeba1 default }" containerID=47ed4ced977278167196dcc59b934aa07e5cbfc7235e170c360167faff7fec4d datapathConfiguration="&{false false false false false }" interface=lxcec811ce9b346 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47ed4ced97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47ed4ced97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47ed4ced97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identity=65398 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=47ed4ced97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identity=65398 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47ed4ced97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1001 identity=65398 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=47ed4ced97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1001 identity=65398 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.208 5aa17db6-f47e-4965-9b67-8f513d9e45f4 default }" containerID=bca12afff330d20feb7063eabc4312f297b05dd8e7722c66d6ea0200ab83e61e datapathConfiguration="&{false false false false false }" interface=lxc9f7e59c16292 k8sPodName=openstack/keystone-credential-setup-8hvdt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bca12afff3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-credential-setup-8hvdt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bca12afff3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0ca8af86-83d1-44d8-b92b-63fb7e4fdc02,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=0ca8af86-83d1-44d8-b92b-63fb7e4fdc02,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-credential-setup-8hvdt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0ca8af86-83d1-44d8-b92b-63fb7e4fdc02;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=0ca8af86-83d1-44d8-b92b-63fb7e4fdc02;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bca12afff3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=33343 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0ca8af86-83d1-44d8-b92b-63fb7e4fdc02,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=0ca8af86-83d1-44d8-b92b-63fb7e4fdc02,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-credential-setup-8hvdt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bca12afff3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=33343 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-credential-setup-8hvdt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bca12afff3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1472 identity=33343 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-credential-setup-8hvdt subsys=endpoint level=info msg="Successful endpoint creation" containerID=bca12afff3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1472 identity=33343 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-credential-setup-8hvdt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 c6358415-57a4-4d96-a4b4-9deb8ddf399e default }" containerID=bb266fe9a8722b6c99700fed45f771aed13e03308cf378e3bc63e731aa33dde6 datapathConfiguration="&{false false false false false }" interface=lxcebb8bee7507f k8sPodName=openstack/keystone-api-868db576cd-nn8k2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb266fe9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-api-868db576cd-nn8k2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb266fe9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-api-868db576cd-nn8k2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb266fe9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=47208 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-api-868db576cd-nn8k2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb266fe9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=47208 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-api-868db576cd-nn8k2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb266fe9a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=65 identity=47208 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-api-868db576cd-nn8k2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb266fe9a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=65 identity=47208 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-api-868db576cd-nn8k2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bca12afff3 endpointID=1472 k8sNamespace=openstack k8sPodName=keystone-credential-setup-8hvdt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0ca8af86-83d1-44d8-b92b-63fb7e4fdc02 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=0ca8af86-83d1-44d8-b92b-63fb7e4fdc02 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bca12afff3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1472 identity=33343 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-credential-setup-8hvdt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 31bd2f37-5888-45b8-a2b1-270e3e02d42b default }" containerID=b6b7ddefb1690816723ad3c770a1cd63c0f9283ecb7f12729d964d2891036623 datapathConfiguration="&{false false false false false }" interface=lxc8d9938bf7181 k8sPodName=openstack/keystone-db-init-78ggb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6b7ddefb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-init-78ggb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6b7ddefb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bd3ccac5-d483-4aec-9921-cb0068978803,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bd3ccac5-d483-4aec-9921-cb0068978803,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-init-78ggb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bd3ccac5-d483-4aec-9921-cb0068978803;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=bd3ccac5-d483-4aec-9921-cb0068978803;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b6b7ddefb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-init-78ggb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b6b7ddefb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identity=22240 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bd3ccac5-d483-4aec-9921-cb0068978803,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bd3ccac5-d483-4aec-9921-cb0068978803,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-init-78ggb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6b7ddefb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identity=22240 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-init-78ggb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6b7ddefb1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1367 identity=22240 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-init-78ggb subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6b7ddefb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1367 identity=22240 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-init-78ggb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b6b7ddefb1 endpointID=1367 k8sNamespace=openstack k8sPodName=keystone-db-init-78ggb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bd3ccac5-d483-4aec-9921-cb0068978803 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=bd3ccac5-d483-4aec-9921-cb0068978803 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b6b7ddefb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1367 identity=22240 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-init-78ggb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 a7eb6b9d-e804-4f33-ae03-31bc388b9694 default }" containerID=054f66fc19810626e832cba336028a04b47347a9280e514aa7fed604c985b9e8 datapathConfiguration="&{false false false false false }" interface=lxc65325ac21d81 k8sPodName=openstack/keystone-fernet-setup-sl6b5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=054f66fc19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3595 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-fernet-setup-sl6b5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=054f66fc19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3595 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9fb42954-62d9-4059-a230-e2052f5d2f7e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9fb42954-62d9-4059-a230-e2052f5d2f7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-fernet-setup-sl6b5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9fb42954-62d9-4059-a230-e2052f5d2f7e;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=9fb42954-62d9-4059-a230-e2052f5d2f7e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=054f66fc19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3595 identity=6518 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9fb42954-62d9-4059-a230-e2052f5d2f7e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9fb42954-62d9-4059-a230-e2052f5d2f7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-fernet-setup-sl6b5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=054f66fc19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3595 identity=6518 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-fernet-setup-sl6b5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=054f66fc19 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3595 identity=6518 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-fernet-setup-sl6b5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=054f66fc19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3595 identity=6518 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-fernet-setup-sl6b5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=054f66fc19 endpointID=3595 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-sl6b5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9fb42954-62d9-4059-a230-e2052f5d2f7e k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=9fb42954-62d9-4059-a230-e2052f5d2f7e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=054f66fc19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3595 identity=6518 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-fernet-setup-sl6b5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 10d0b1d8-a8f3-4e46-9434-7b5ccbcee7da default }" containerID=9aabc87c17cb4984b1b9c721065acdd21596917e0e173ed10365669193516d0a datapathConfiguration="&{false false false false false }" interface=lxc3847f15ce6df k8sPodName=openstack/keystone-db-sync-q9l9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9aabc87c17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-db-sync-q9l9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9aabc87c17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1d7958dd-aeff-4fbf-b2b9-5d081e03118c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=1d7958dd-aeff-4fbf-b2b9-5d081e03118c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-db-sync-q9l9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1d7958dd-aeff-4fbf-b2b9-5d081e03118c;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=1d7958dd-aeff-4fbf-b2b9-5d081e03118c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9aabc87c17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 identity=62715 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1d7958dd-aeff-4fbf-b2b9-5d081e03118c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=1d7958dd-aeff-4fbf-b2b9-5d081e03118c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-db-sync-q9l9d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9aabc87c17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 identity=62715 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-db-sync-q9l9d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9aabc87c17 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3684 identity=62715 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-db-sync-q9l9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=9aabc87c17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3684 identity=62715 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-db-sync-q9l9d subsys=daemon level=info msg="Delete endpoint request" containerID=9aabc87c17 endpointID=3684 k8sNamespace=openstack k8sPodName=keystone-db-sync-q9l9d subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1d7958dd-aeff-4fbf-b2b9-5d081e03118c k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=1d7958dd-aeff-4fbf-b2b9-5d081e03118c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9aabc87c17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3684 identity=62715 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-db-sync-q9l9d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 ef41c58d-8864-47b6-bfd7-d22e7df87f5c default }" containerID=c4b0282c00a3036e7c372a1890e08392a685ff18f8299c70de66da564604e6bd datapathConfiguration="&{false false false false false }" interface=lxcb05d423d0d45 k8sPodName=openstack/keystone-rabbit-init-pbxjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4b0282c00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-rabbit-init-pbxjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4b0282c00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8c2b0f75-0ade-43e8-a749-011ba7bdb915,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8c2b0f75-0ade-43e8-a749-011ba7bdb915,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-rabbit-init-pbxjx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8c2b0f75-0ade-43e8-a749-011ba7bdb915;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8c2b0f75-0ade-43e8-a749-011ba7bdb915;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4b0282c00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 identity=12759 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8c2b0f75-0ade-43e8-a749-011ba7bdb915,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8c2b0f75-0ade-43e8-a749-011ba7bdb915,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-rabbit-init-pbxjx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4b0282c00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 identity=12759 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-rabbit-init-pbxjx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c4b0282c00 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2142 identity=12759 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-rabbit-init-pbxjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4b0282c00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2142 identity=12759 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-rabbit-init-pbxjx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c4b0282c00 endpointID=2142 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-pbxjx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8c2b0f75-0ade-43e8-a749-011ba7bdb915 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8c2b0f75-0ade-43e8-a749-011ba7bdb915 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c4b0282c00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2142 identity=12759 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-rabbit-init-pbxjx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 2ade3404-b055-4a8e-b06c-1d59fd7c9ab5 default }" containerID=37d2604dc9f90b3db1f09c70f30e472472299ef0bfae4e0930b50f0ce16c51dd datapathConfiguration="&{false false false false false }" interface=lxc479684c03348 k8sPodName=openstack/keystone-domain-manage-h7l8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37d2604dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-h7l8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37d2604dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=99243d28-fe21-45bd-885f-7742a1f810f6,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=99243d28-fe21-45bd-885f-7742a1f810f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-h7l8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=37d2604dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-h7l8x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=99243d28-fe21-45bd-885f-7742a1f810f6;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=99243d28-fe21-45bd-885f-7742a1f810f6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37d2604dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 identity=31880 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=99243d28-fe21-45bd-885f-7742a1f810f6,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=99243d28-fe21-45bd-885f-7742a1f810f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-h7l8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37d2604dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 identity=31880 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-h7l8x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37d2604dc9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1544 identity=31880 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-h7l8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=37d2604dc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1544 identity=31880 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-h7l8x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=37d2604dc9 endpointID=1544 k8sNamespace=openstack k8sPodName=keystone-domain-manage-h7l8x subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=99243d28-fe21-45bd-885f-7742a1f810f6 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=99243d28-fe21-45bd-885f-7742a1f810f6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=37d2604dc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1544 identity=31880 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-h7l8x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 650b73c0-8012-4593-9829-8bbf09fc02dd default }" containerID=fb40bba29a0cc3e1afd7c02b3a8b6f92c02ae7b234bce838775d5a903acbfc75 datapathConfiguration="&{false false false false false }" interface=lxc511d41cb0d8c k8sPodName=openstack/keystone-bootstrap-9clv5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb40bba29a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-bootstrap-9clv5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb40bba29a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=971266e5-efeb-4b0d-a5cb-535966cc44e2,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=971266e5-efeb-4b0d-a5cb-535966cc44e2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-bootstrap-9clv5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=971266e5-efeb-4b0d-a5cb-535966cc44e2;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=971266e5-efeb-4b0d-a5cb-535966cc44e2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb40bba29a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 identity=30065 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=971266e5-efeb-4b0d-a5cb-535966cc44e2,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=971266e5-efeb-4b0d-a5cb-535966cc44e2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-bootstrap-9clv5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb40bba29a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 identity=30065 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-bootstrap-9clv5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb40bba29a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3169 identity=30065 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-bootstrap-9clv5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb40bba29a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3169 identity=30065 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-bootstrap-9clv5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb40bba29a endpointID=3169 k8sNamespace=openstack k8sPodName=keystone-bootstrap-9clv5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=971266e5-efeb-4b0d-a5cb-535966cc44e2 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=971266e5-efeb-4b0d-a5cb-535966cc44e2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fb40bba29a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3169 identity=30065 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-bootstrap-9clv5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 8aeb72bb-5443-45ea-bafb-c0049f2ac620 default }" containerID=c1a0f9cc238c65dc8cb3339da0547c1de9cde9b1e125f3bebae2cac5326916e4 datapathConfiguration="&{false false false false false }" interface=lxce87d76ae8c65 k8sPodName=local-path-storage/helper-pod-create-pvc-abf78fe8-f66e-4f63-a475-c8afc7929722 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1a0f9cc23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abf78fe8-f66e-4f63-a475-c8afc7929722 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1a0f9cc23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abf78fe8-f66e-4f63-a475-c8afc7929722 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1a0f9cc23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identity=19001 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abf78fe8-f66e-4f63-a475-c8afc7929722 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1a0f9cc23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identity=19001 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abf78fe8-f66e-4f63-a475-c8afc7929722 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1a0f9cc23 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2216 identity=19001 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abf78fe8-f66e-4f63-a475-c8afc7929722 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1a0f9cc23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2216 identity=19001 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abf78fe8-f66e-4f63-a475-c8afc7929722 subsys=daemon level=info msg="Delete endpoint request" containerID=c1a0f9cc23 endpointID=2216 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-abf78fe8-f66e-4f63-a475-c8afc7929722 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c1a0f9cc23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2216 identity=19001 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abf78fe8-f66e-4f63-a475-c8afc7929722 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 c9d5e2c9-93f7-4f65-8778-9c05af1f3747 default }" containerID=04fed3fe69c44e2be6f185e769e44c7584337e1dffb8565659d249c8c6c1a40f datapathConfiguration="&{false false false false false }" interface=lxcb1470e67deb8 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04fed3fe69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1096 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04fed3fe69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1096 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04fed3fe69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1096 identity=13115 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04fed3fe69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1096 identity=13115 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=04fed3fe69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1096 identity=13115 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=04fed3fe69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1096 identity=13115 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.88 28cf42a5-8bd8-4e19-a281-98ecdf1a0a0f default }" containerID=d64d49bbdf9c17f4aa6fec00c44f1ff3982cb965a85eef8fa7f5f9ba76197313 datapathConfiguration="&{false false false false false }" interface=lxc3b347d1ee040 k8sPodName=openstack/barbican-api-c9887fb7-vgkbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d64d49bbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-api-c9887fb7-vgkbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d64d49bbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-api-c9887fb7-vgkbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d64d49bbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-api-c9887fb7-vgkbj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d64d49bbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identity=42474 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-api-c9887fb7-vgkbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d64d49bbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identity=42474 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-api-c9887fb7-vgkbj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 e3f7b721-cc57-42b1-8fe6-099a4cb6cd3a default }" containerID=ad8ca4747af6aa57fb44efe158c27e13668e736c10d57485ac474e773cc35c8b datapathConfiguration="&{false false false false false }" interface=lxc9a1fd2e9671d k8sPodName=openstack/barbican-db-init-rkmbf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad8ca4747a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-init-rkmbf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad8ca4747a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b5c4fce9-6b8f-47ab-bd5e-057904988c85,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b5c4fce9-6b8f-47ab-bd5e-057904988c85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-init-rkmbf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b5c4fce9-6b8f-47ab-bd5e-057904988c85;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=b5c4fce9-6b8f-47ab-bd5e-057904988c85;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad8ca4747a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=53100 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b5c4fce9-6b8f-47ab-bd5e-057904988c85,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b5c4fce9-6b8f-47ab-bd5e-057904988c85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-init-rkmbf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad8ca4747a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=53100 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-init-rkmbf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d64d49bbdf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=807 identity=42474 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-api-c9887fb7-vgkbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=d64d49bbdf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=807 identity=42474 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-api-c9887fb7-vgkbj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ad8ca4747a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=81 identity=53100 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-init-rkmbf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad8ca4747a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=81 identity=53100 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-init-rkmbf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad8ca4747a endpointID=81 k8sNamespace=openstack k8sPodName=barbican-db-init-rkmbf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b5c4fce9-6b8f-47ab-bd5e-057904988c85 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=b5c4fce9-6b8f-47ab-bd5e-057904988c85 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ad8ca4747a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=81 identity=53100 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-init-rkmbf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 19535faf-0ef8-4092-a729-ce368d7b0a03 default }" containerID=9554513dfac7e84bf3b8e9f644e084d7cbc3d31621bf23c4b16ba43e650dbfc9 datapathConfiguration="&{false false false false false }" interface=lxcbde014d46211 k8sPodName=openstack/barbican-db-sync-rpvbf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9554513dfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4014 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-sync-rpvbf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9554513dfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4014 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=db69798f-9c3c-4ed7-9556-ebcf33dc353a,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=db69798f-9c3c-4ed7-9556-ebcf33dc353a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-sync-rpvbf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=db69798f-9c3c-4ed7-9556-ebcf33dc353a;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=db69798f-9c3c-4ed7-9556-ebcf33dc353a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9554513dfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4014 identity=1835 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=db69798f-9c3c-4ed7-9556-ebcf33dc353a,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=db69798f-9c3c-4ed7-9556-ebcf33dc353a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-sync-rpvbf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9554513dfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4014 identity=1835 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-sync-rpvbf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9554513dfa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4014 identity=1835 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-sync-rpvbf subsys=endpoint level=info msg="Successful endpoint creation" containerID=9554513dfa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4014 identity=1835 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-sync-rpvbf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03608289258322399 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=9554513dfa endpointID=4014 k8sNamespace=openstack k8sPodName=barbican-db-sync-rpvbf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=db69798f-9c3c-4ed7-9556-ebcf33dc353a k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=db69798f-9c3c-4ed7-9556-ebcf33dc353a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9554513dfa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4014 identity=1835 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-sync-rpvbf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 eb0bfea3-6a82-4d63-80bd-845597372c63 default }" containerID=5218727679a96e8de9c5f44f7102a741106c4438bafb17795497f82135fd16c9 datapathConfiguration="&{false false false false false }" interface=lxc1bf8e4026e56 k8sPodName=openstack/barbican-rabbit-init-gq8qr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5218727679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-rabbit-init-gq8qr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5218727679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bd1190d4-69f9-4a0a-8908-c2177694e6a7,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bd1190d4-69f9-4a0a-8908-c2177694e6a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-rabbit-init-gq8qr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5218727679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-rabbit-init-gq8qr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bd1190d4-69f9-4a0a-8908-c2177694e6a7;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=bd1190d4-69f9-4a0a-8908-c2177694e6a7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5218727679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=16258 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bd1190d4-69f9-4a0a-8908-c2177694e6a7,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bd1190d4-69f9-4a0a-8908-c2177694e6a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-rabbit-init-gq8qr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5218727679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=16258 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-rabbit-init-gq8qr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5218727679 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=653 identity=16258 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-rabbit-init-gq8qr subsys=endpoint level=info msg="Successful endpoint creation" containerID=5218727679 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=653 identity=16258 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-rabbit-init-gq8qr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5218727679 endpointID=653 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-gq8qr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bd1190d4-69f9-4a0a-8908-c2177694e6a7 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=bd1190d4-69f9-4a0a-8908-c2177694e6a7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5218727679 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=653 identity=16258 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-rabbit-init-gq8qr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 eb539f86-dfd5-4410-a373-567b51f7a438 default }" containerID=3bba66ebf1f93a32311b46145c8edb0322b8475aa6d21cc715ed2f66345492b9 datapathConfiguration="&{false false false false false }" interface=lxcb74668a79742 k8sPodName=openstack/barbican-ks-service-49jxh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bba66ebf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-service-49jxh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bba66ebf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a905cbc7-36d2-4d99-95e5-989fbb547b3b,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a905cbc7-36d2-4d99-95e5-989fbb547b3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-service-49jxh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a905cbc7-36d2-4d99-95e5-989fbb547b3b;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=a905cbc7-36d2-4d99-95e5-989fbb547b3b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bba66ebf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identity=10444 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a905cbc7-36d2-4d99-95e5-989fbb547b3b,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a905cbc7-36d2-4d99-95e5-989fbb547b3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-service-49jxh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bba66ebf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identity=10444 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-service-49jxh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3bba66ebf1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2604 identity=10444 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-service-49jxh subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bba66ebf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2604 identity=10444 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-service-49jxh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3bba66ebf1 endpointID=2604 k8sNamespace=openstack k8sPodName=barbican-ks-service-49jxh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a905cbc7-36d2-4d99-95e5-989fbb547b3b k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=a905cbc7-36d2-4d99-95e5-989fbb547b3b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3bba66ebf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2604 identity=10444 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-service-49jxh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 5e3c6ee1-b69e-48fb-8f73-f750df2d6187 default }" containerID=4912a09088b56dc52f412e88a8a79efe508c984911e454415bc90e2a2c13b0d9 datapathConfiguration="&{false false false false false }" interface=lxcba80ad60192b k8sPodName=openstack/barbican-ks-endpoints-jc5f7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4912a09088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jc5f7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4912a09088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9d37e32c-179c-46cf-8c1f-e808e70f8536,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9d37e32c-179c-46cf-8c1f-e808e70f8536,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jc5f7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9d37e32c-179c-46cf-8c1f-e808e70f8536;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=9d37e32c-179c-46cf-8c1f-e808e70f8536;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4912a09088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identity=54499 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9d37e32c-179c-46cf-8c1f-e808e70f8536,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9d37e32c-179c-46cf-8c1f-e808e70f8536,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jc5f7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4912a09088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identity=54499 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jc5f7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4912a09088 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2380 identity=54499 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jc5f7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4912a09088 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2380 identity=54499 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jc5f7 subsys=daemon level=info msg="Delete endpoint request" containerID=4912a09088 endpointID=2380 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-jc5f7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9d37e32c-179c-46cf-8c1f-e808e70f8536 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=9d37e32c-179c-46cf-8c1f-e808e70f8536 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4912a09088 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2380 identity=54499 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jc5f7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 d5b13265-d3f5-4505-bfb6-6ab5ef7aa592 default }" containerID=a81a9bd91a473d50c20c0c59659fad26e8f023d83b438aacf521aa41f31a658d datapathConfiguration="&{false false false false false }" interface=lxc0b1d4a160eba k8sPodName=openstack/barbican-ks-user-pb2jz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a81a9bd91a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-user-pb2jz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a81a9bd91a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=79a25ca9-5258-4263-8312-4a079d86d02a,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=79a25ca9-5258-4263-8312-4a079d86d02a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-user-pb2jz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a81a9bd91a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-user-pb2jz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=79a25ca9-5258-4263-8312-4a079d86d02a;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=79a25ca9-5258-4263-8312-4a079d86d02a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a81a9bd91a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=11915 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=79a25ca9-5258-4263-8312-4a079d86d02a,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=79a25ca9-5258-4263-8312-4a079d86d02a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-user-pb2jz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a81a9bd91a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=11915 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-user-pb2jz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a81a9bd91a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1623 identity=11915 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-user-pb2jz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a81a9bd91a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1623 identity=11915 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-user-pb2jz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a81a9bd91a endpointID=1623 k8sNamespace=openstack k8sPodName=barbican-ks-user-pb2jz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=79a25ca9-5258-4263-8312-4a079d86d02a k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=79a25ca9-5258-4263-8312-4a079d86d02a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a81a9bd91a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1623 identity=11915 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-user-pb2jz subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.241 02ff7111-40ee-432e-9640-035c8e0c679b default }" containerID=ddbcebe6a96f96a8708f5c6ca0a5d554c80672d1aac040734f35098a051123bf datapathConfiguration="&{false false false false false }" interface=lxcee6aa77324fb k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-r4r54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddbcebe6a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 ipv4=10.0.0.241 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-r4r54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddbcebe6a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.241 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-r4r54 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ddbcebe6a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-r4r54 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ddbcebe6a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identity=50182 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.241 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-r4r54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddbcebe6a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identity=50182 ipv4=10.0.0.241 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-r4r54 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ddbcebe6a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1713 identity=50182 ipv4=10.0.0.241 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-r4r54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddbcebe6a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1713 identity=50182 ipv4=10.0.0.241 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-r4r54 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 4e5599a7-ba14-49cf-a6bd-869ce0f3564a default }" containerID=5a7d7dc0b67ee853e186aa38b8e055e6154da6361f7bd7012f6e44fd1058f697 datapathConfiguration="&{false false false false false }" interface=lxcc7593307f7fa k8sPodName=openstack/rook-ceph-detect-version-mj56l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a7d7dc0b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mj56l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a7d7dc0b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=463425ab-7508-49c5-8434-9aa8530ca208,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=463425ab-7508-49c5-8434-9aa8530ca208,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mj56l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=463425ab-7508-49c5-8434-9aa8530ca208;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=463425ab-7508-49c5-8434-9aa8530ca208;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a7d7dc0b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 identity=7999 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=463425ab-7508-49c5-8434-9aa8530ca208,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=463425ab-7508-49c5-8434-9aa8530ca208,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mj56l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a7d7dc0b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 identity=7999 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mj56l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5a7d7dc0b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=585 identity=7999 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mj56l subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a7d7dc0b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=585 identity=7999 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mj56l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a7d7dc0b6 endpointID=585 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-mj56l subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=463425ab-7508-49c5-8434-9aa8530ca208 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=463425ab-7508-49c5-8434-9aa8530ca208 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=5a7d7dc0b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=585 identity=7999 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mj56l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 d81bc360-fb64-40d5-ba97-20de08823a29 default }" containerID=ec8fe0f4f654f8ac9a353c901d6d08ce018039b5051c767d1200e2aec5ce6be9 datapathConfiguration="&{false false false false false }" interface=lxcc5b064f4f230 k8sPodName=openstack/ceph-object-controller-detect-version-4fhw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec8fe0f4f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4fhw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec8fe0f4f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=058fabe3-f317-425d-9301-81ad733856e5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=058fabe3-f317-425d-9301-81ad733856e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4fhw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=058fabe3-f317-425d-9301-81ad733856e5;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=058fabe3-f317-425d-9301-81ad733856e5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec8fe0f4f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identity=57256 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=058fabe3-f317-425d-9301-81ad733856e5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=058fabe3-f317-425d-9301-81ad733856e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4fhw6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec8fe0f4f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identity=57256 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4fhw6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ec8fe0f4f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1898 identity=57256 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4fhw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec8fe0f4f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1898 identity=57256 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4fhw6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec8fe0f4f6 endpointID=1898 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-4fhw6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=058fabe3-f317-425d-9301-81ad733856e5 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=058fabe3-f317-425d-9301-81ad733856e5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=ec8fe0f4f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1898 identity=57256 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4fhw6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 3ccb7d75-7a1d-469a-b292-1886988997f4 default }" containerID=856238d8d6ec9283a39bee686ea6e69b5a9ae132ace1806754dd7c5cb37b0542 datapathConfiguration="&{false false false false false }" interface=lxcc2d2cefece6c k8sPodName=local-path-storage/helper-pod-create-pvc-ab0816d0-afe6-493d-8282-81d9caa94100 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=856238d8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=814 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab0816d0-afe6-493d-8282-81d9caa94100 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=856238d8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=814 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab0816d0-afe6-493d-8282-81d9caa94100 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=856238d8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=814 identity=19001 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab0816d0-afe6-493d-8282-81d9caa94100 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=856238d8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=814 identity=19001 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab0816d0-afe6-493d-8282-81d9caa94100 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=856238d8d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=814 identity=19001 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab0816d0-afe6-493d-8282-81d9caa94100 subsys=endpoint level=info msg="Successful endpoint creation" containerID=856238d8d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=814 identity=19001 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab0816d0-afe6-493d-8282-81d9caa94100 subsys=daemon level=info msg="Delete endpoint request" containerID=856238d8d6 endpointID=814 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ab0816d0-afe6-493d-8282-81d9caa94100 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=856238d8d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=814 identity=19001 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab0816d0-afe6-493d-8282-81d9caa94100 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 cffa1d6c-1607-4d85-86ae-4c565cffa220 default }" containerID=7aecb1eafe55846b15a8f4edd5d539af36d53ab29ed7214148d3cdf280404df4 datapathConfiguration="&{false false false false false }" interface=lxc7e80344a02e4 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7aecb1eafe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1421 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7aecb1eafe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1421 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7aecb1eafe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1421 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7aecb1eafe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1421 identity=58020 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7aecb1eafe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1421 identity=58020 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7aecb1eafe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1421 identity=58020 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7aecb1eafe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1421 identity=58020 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.48 36b35c81-c11b-42fc-8528-683d7594e8a5 default }" containerID=9de8674ba897428c75ecdcb22252796e199bc119452a8806fdb0c8bd6b9ff46a datapathConfiguration="&{false false false false false }" interface=lxc5d54cf0e8c07 k8sPodName=openstack/glance-db-init-4s62n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9de8674ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-db-init-4s62n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9de8674ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f58fc8ac-e78a-4a45-a686-d8d5ded07d56,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=f58fc8ac-e78a-4a45-a686-d8d5ded07d56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-db-init-4s62n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f58fc8ac-e78a-4a45-a686-d8d5ded07d56;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=f58fc8ac-e78a-4a45-a686-d8d5ded07d56;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9de8674ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=22032 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f58fc8ac-e78a-4a45-a686-d8d5ded07d56,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=f58fc8ac-e78a-4a45-a686-d8d5ded07d56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-db-init-4s62n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9de8674ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=22032 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-db-init-4s62n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9de8674ba8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=358 identity=22032 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-db-init-4s62n subsys=endpoint level=info msg="Successful endpoint creation" containerID=9de8674ba8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=358 identity=22032 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-db-init-4s62n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9de8674ba8 endpointID=358 k8sNamespace=openstack k8sPodName=glance-db-init-4s62n subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f58fc8ac-e78a-4a45-a686-d8d5ded07d56 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=f58fc8ac-e78a-4a45-a686-d8d5ded07d56 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9de8674ba8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=358 identity=22032 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-db-init-4s62n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 6127dab8-8722-4134-8d13-db648e31bf6b default }" containerID=d2b28f3bf86ac32fc6547f5ab7d87ed2158608d217d9d6700b5880a0c1529d44 datapathConfiguration="&{false false false false false }" interface=lxceaeb49c3c1e6 k8sPodName=openstack/glance-db-sync-txp46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2b28f3bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-db-sync-txp46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2b28f3bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=88c7d527-3d04-4dae-93f9-166153d4cbde,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=88c7d527-3d04-4dae-93f9-166153d4cbde,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-db-sync-txp46 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d2b28f3bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-db-sync-txp46 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=88c7d527-3d04-4dae-93f9-166153d4cbde;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=88c7d527-3d04-4dae-93f9-166153d4cbde;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2b28f3bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identity=63049 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=88c7d527-3d04-4dae-93f9-166153d4cbde,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=88c7d527-3d04-4dae-93f9-166153d4cbde,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-db-sync-txp46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2b28f3bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identity=63049 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-db-sync-txp46 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2b28f3bf8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1933 identity=63049 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-db-sync-txp46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2b28f3bf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1933 identity=63049 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-db-sync-txp46 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.120 0e38e179-cff3-43bb-bf60-579de79e651b default }" containerID=69d757419141e34a53fd624e54da8cfcfdf62ca817fee1842090a7a5971de4a6 datapathConfiguration="&{false false false false false }" interface=lxc78d202fddf81 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jt9qg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69d7574191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jt9qg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69d7574191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jt9qg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=69d7574191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jt9qg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69d7574191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=15839 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jt9qg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69d7574191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=15839 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jt9qg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 7d3e36fc-21dc-42d3-9cbe-a0a16a9e156e default }" containerID=b3a189a9e368545b31144b42fc21477ffc807c356c13a3954683184f1e38111a datapathConfiguration="&{false false false false false }" interface=lxc8aaf2018af61 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4v5nw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3a189a9e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4v5nw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3a189a9e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4v5nw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3a189a9e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 identity=2031 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4v5nw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3a189a9e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=692 identity=2031 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4v5nw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69d7574191 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=45 identity=15839 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jt9qg subsys=endpoint level=info msg="Successful endpoint creation" containerID=69d7574191 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=15839 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jt9qg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b3a189a9e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=692 identity=2031 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4v5nw subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3a189a9e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=692 identity=2031 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4v5nw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d2b28f3bf8 endpointID=1933 k8sNamespace=openstack k8sPodName=glance-db-sync-txp46 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=88c7d527-3d04-4dae-93f9-166153d4cbde k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=88c7d527-3d04-4dae-93f9-166153d4cbde k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d2b28f3bf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1933 identity=63049 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-db-sync-txp46 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 4bbbb7e3-b4e2-4eb0-8368-901ae35a0919 default }" containerID=3666e5056850f9e171d7c9ef63a8dfd5f45b7c812714e9225d338f2c811c6110 datapathConfiguration="&{false false false false false }" interface=lxc6ed4baacc5fb k8sPodName=openstack/glance-rabbit-init-5c8tk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3666e50568 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-rabbit-init-5c8tk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3666e50568 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5b9e7651-c53e-4113-8266-2b67ba6da46d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5b9e7651-c53e-4113-8266-2b67ba6da46d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-rabbit-init-5c8tk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5b9e7651-c53e-4113-8266-2b67ba6da46d;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5b9e7651-c53e-4113-8266-2b67ba6da46d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3666e50568 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 identity=25838 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5b9e7651-c53e-4113-8266-2b67ba6da46d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5b9e7651-c53e-4113-8266-2b67ba6da46d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-rabbit-init-5c8tk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3666e50568 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 identity=25838 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-rabbit-init-5c8tk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3666e50568 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1083 identity=25838 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-rabbit-init-5c8tk subsys=endpoint level=info msg="Successful endpoint creation" containerID=3666e50568 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1083 identity=25838 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-rabbit-init-5c8tk subsys=daemon level=info msg="Delete endpoint request" containerID=3666e50568 endpointID=1083 k8sNamespace=openstack k8sPodName=glance-rabbit-init-5c8tk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5b9e7651-c53e-4113-8266-2b67ba6da46d k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5b9e7651-c53e-4113-8266-2b67ba6da46d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3666e50568 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1083 identity=25838 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-rabbit-init-5c8tk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 4c71d2ca-75d4-4978-9203-b651e8556da6 default }" containerID=533340916d8a4d264952deb39a9a35475ce9103e25fabd56987b3a45b12ee460 datapathConfiguration="&{false false false false false }" interface=lxc968d049cc333 k8sPodName=openstack/glance-ks-service-jswcn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=533340916d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-service-jswcn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=533340916d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8c50b72d-34d9-43ff-ad96-d084addb2ee7,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=8c50b72d-34d9-43ff-ad96-d084addb2ee7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-service-jswcn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8c50b72d-34d9-43ff-ad96-d084addb2ee7;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=8c50b72d-34d9-43ff-ad96-d084addb2ee7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=533340916d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=52103 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8c50b72d-34d9-43ff-ad96-d084addb2ee7,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=8c50b72d-34d9-43ff-ad96-d084addb2ee7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-service-jswcn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=533340916d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=52103 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-service-jswcn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=533340916d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=227 identity=52103 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-service-jswcn subsys=endpoint level=info msg="Successful endpoint creation" containerID=533340916d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=227 identity=52103 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-service-jswcn subsys=daemon level=info msg="Delete endpoint request" containerID=533340916d endpointID=227 k8sNamespace=openstack k8sPodName=glance-ks-service-jswcn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8c50b72d-34d9-43ff-ad96-d084addb2ee7 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=8c50b72d-34d9-43ff-ad96-d084addb2ee7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=533340916d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=227 identity=52103 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-service-jswcn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 694d77c4-4918-4f79-922c-82f255680cd1 default }" containerID=1128b9cfff6ea100095a828c852df5eaef8c25e7b585f070fde07b8c7bd36cf9 datapathConfiguration="&{false false false false false }" interface=lxc235353f06e22 k8sPodName=openstack/glance-ks-endpoints-2v8q6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1128b9cfff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-2v8q6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1128b9cfff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5ddf0b7d-c55e-4ddf-a588-838643185d2f,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5ddf0b7d-c55e-4ddf-a588-838643185d2f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-2v8q6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5ddf0b7d-c55e-4ddf-a588-838643185d2f;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=5ddf0b7d-c55e-4ddf-a588-838643185d2f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1128b9cfff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=13186 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5ddf0b7d-c55e-4ddf-a588-838643185d2f,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5ddf0b7d-c55e-4ddf-a588-838643185d2f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-2v8q6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1128b9cfff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=13186 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-2v8q6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1128b9cfff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=152 identity=13186 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-2v8q6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1128b9cfff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=152 identity=13186 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-2v8q6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1128b9cfff endpointID=152 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-2v8q6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5ddf0b7d-c55e-4ddf-a588-838643185d2f k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=5ddf0b7d-c55e-4ddf-a588-838643185d2f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1128b9cfff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=152 identity=13186 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-endpoints-2v8q6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 58f988f7-4a2e-4e99-ad8c-6068d6adbfc5 default }" containerID=b42eaf82f4911142840a09b64123b3a0f06633209f88175cfe6553b4aa874842 datapathConfiguration="&{false false false false false }" interface=lxc5764b0c9bd98 k8sPodName=openstack/glance-ks-user-k2wzh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b42eaf82f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1473 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-user-k2wzh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b42eaf82f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1473 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=768888e3-2c39-42e5-b60c-cff3cbc7558a,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=768888e3-2c39-42e5-b60c-cff3cbc7558a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-user-k2wzh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=768888e3-2c39-42e5-b60c-cff3cbc7558a;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=768888e3-2c39-42e5-b60c-cff3cbc7558a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b42eaf82f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1473 identity=55754 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=768888e3-2c39-42e5-b60c-cff3cbc7558a,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=768888e3-2c39-42e5-b60c-cff3cbc7558a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-user-k2wzh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b42eaf82f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1473 identity=55754 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-user-k2wzh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b42eaf82f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1473 identity=55754 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-user-k2wzh subsys=endpoint level=info msg="Successful endpoint creation" containerID=b42eaf82f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1473 identity=55754 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-user-k2wzh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b42eaf82f4 endpointID=1473 k8sNamespace=openstack k8sPodName=glance-ks-user-k2wzh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=768888e3-2c39-42e5-b60c-cff3cbc7558a k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=768888e3-2c39-42e5-b60c-cff3cbc7558a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b42eaf82f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1473 identity=55754 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-user-k2wzh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 b05b6973-93b9-4f4a-8d1c-fdaca5f0f200 default }" containerID=99506acecda0a012403add41fed0ec232539febff5aa756b55487423c2682761 datapathConfiguration="&{false false false false false }" interface=lxc75c35f6adbad k8sPodName=openstack/glance-metadefs-load-p2vn2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99506acecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-metadefs-load-p2vn2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99506acecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1b16a783-2027-476c-b206-a22730e04ef0,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=1b16a783-2027-476c-b206-a22730e04ef0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-metadefs-load-p2vn2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1b16a783-2027-476c-b206-a22730e04ef0;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=1b16a783-2027-476c-b206-a22730e04ef0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=99506acecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-metadefs-load-p2vn2 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=99506acecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=14438 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1b16a783-2027-476c-b206-a22730e04ef0,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=1b16a783-2027-476c-b206-a22730e04ef0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-metadefs-load-p2vn2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99506acecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=14438 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-metadefs-load-p2vn2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99506acecd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=889 identity=14438 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-metadefs-load-p2vn2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99506acecd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=889 identity=14438 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-metadefs-load-p2vn2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=99506acecd endpointID=889 k8sNamespace=openstack k8sPodName=glance-metadefs-load-p2vn2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1b16a783-2027-476c-b206-a22730e04ef0 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=1b16a783-2027-476c-b206-a22730e04ef0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=99506acecd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=889 identity=14438 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-metadefs-load-p2vn2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 2fbea9bf-41f5-4d1f-b448-6474eb4a8031 default }" containerID=fc9583e058b38a9e882e2566afc5f64d896333e8e34a92bbe921c90f6be8b3cc datapathConfiguration="&{false false false false false }" interface=lxcd20e654fd65d k8sPodName=openstack/glance-storage-init-278tg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc9583e058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-storage-init-278tg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc9583e058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a903fe67-d841-42fc-9802-d2d921384e93,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a903fe67-d841-42fc-9802-d2d921384e93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-storage-init-278tg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fc9583e058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-storage-init-278tg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a903fe67-d841-42fc-9802-d2d921384e93;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=a903fe67-d841-42fc-9802-d2d921384e93;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc9583e058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 identity=15183 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a903fe67-d841-42fc-9802-d2d921384e93,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a903fe67-d841-42fc-9802-d2d921384e93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-storage-init-278tg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc9583e058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 identity=15183 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-storage-init-278tg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc9583e058 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2599 identity=15183 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-storage-init-278tg subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc9583e058 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2599 identity=15183 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-storage-init-278tg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fc9583e058 endpointID=2599 k8sNamespace=openstack k8sPodName=glance-storage-init-278tg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a903fe67-d841-42fc-9802-d2d921384e93 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=a903fe67-d841-42fc-9802-d2d921384e93 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fc9583e058 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2599 identity=15183 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-storage-init-278tg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 ccdc4ae3-9ac6-448d-8376-d3655137123f default }" containerID=76efa1b7ee5507486742d8c6ec021e343651b68c22373768a7e17d0fc570f7af datapathConfiguration="&{false false false false false }" interface=lxcbeb93f1865ab k8sPodName=openstack/glance-api-8d8c98b46-zbz4c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76efa1b7ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-api-8d8c98b46-zbz4c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76efa1b7ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-api-8d8c98b46-zbz4c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=76efa1b7ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-api-8d8c98b46-zbz4c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76efa1b7ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=46477 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-api-8d8c98b46-zbz4c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76efa1b7ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=46477 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-api-8d8c98b46-zbz4c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76efa1b7ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=714 identity=46477 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-api-8d8c98b46-zbz4c subsys=endpoint level=info msg="Successful endpoint creation" containerID=76efa1b7ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=714 identity=46477 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-api-8d8c98b46-zbz4c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.63 00763f5f-cb5a-4253-a867-5873b4b3a232 default }" containerID=cd38a1b4b3a36813c60ca6fee93587829294d966bb34bd4a20a25563191d83dd datapathConfiguration="&{false false false false false }" interface=lxca9e5b7a2f62e k8sPodName=openstack/staffeln-api-cc8c68f58-g4jfn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd38a1b4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-api-cc8c68f58-g4jfn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd38a1b4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-api-cc8c68f58-g4jfn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd38a1b4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=5513 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-api-cc8c68f58-g4jfn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd38a1b4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=5513 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-api-cc8c68f58-g4jfn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.202 0333f6a3-2fd0-4b21-8b4f-56e59cf30f53 default }" containerID=4722ff4bd9dbb8e57c5619a99b9540114feefd7ca4876d113337b63af5bc04fe datapathConfiguration="&{false false false false false }" interface=lxc0d7ba30b68b2 k8sPodName=openstack/staffeln-conductor-bd6777dbf-jx4vq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4722ff4bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/staffeln-conductor-bd6777dbf-jx4vq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4722ff4bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/staffeln-conductor-bd6777dbf-jx4vq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4722ff4bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identity=63246 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/staffeln-conductor-bd6777dbf-jx4vq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4722ff4bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identity=63246 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/staffeln-conductor-bd6777dbf-jx4vq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd38a1b4b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1460 identity=5513 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-api-cc8c68f58-g4jfn subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd38a1b4b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1460 identity=5513 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-api-cc8c68f58-g4jfn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4722ff4bd9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1181 identity=63246 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/staffeln-conductor-bd6777dbf-jx4vq subsys=endpoint level=info msg="Successful endpoint creation" containerID=4722ff4bd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1181 identity=63246 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/staffeln-conductor-bd6777dbf-jx4vq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.170 77008612-2ef3-4e87-94c6-ad06c28b6eca default }" containerID=6ddc38a622b42438e6d2b0a482e81cbaa8da9c1fbdd5ccd75f58e21647b4d213 datapathConfiguration="&{false false false false false }" interface=lxcea4c091084bd k8sPodName=openstack/staffeln-db-init-znhjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ddc38a622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-db-init-znhjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ddc38a622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=85060a27-b1f0-4a45-89f7-c00ed1a4d9f2,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=85060a27-b1f0-4a45-89f7-c00ed1a4d9f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-db-init-znhjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=85060a27-b1f0-4a45-89f7-c00ed1a4d9f2;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=85060a27-b1f0-4a45-89f7-c00ed1a4d9f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ddc38a622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identity=46840 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=85060a27-b1f0-4a45-89f7-c00ed1a4d9f2,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=85060a27-b1f0-4a45-89f7-c00ed1a4d9f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-db-init-znhjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ddc38a622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identity=46840 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-db-init-znhjt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ddc38a622 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2113 identity=46840 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-db-init-znhjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ddc38a622 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2113 identity=46840 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-db-init-znhjt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6ddc38a622 endpointID=2113 k8sNamespace=openstack k8sPodName=staffeln-db-init-znhjt subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=85060a27-b1f0-4a45-89f7-c00ed1a4d9f2 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=85060a27-b1f0-4a45-89f7-c00ed1a4d9f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=6ddc38a622 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2113 identity=46840 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-db-init-znhjt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 9185a592-bcc3-45b1-a940-78efa3f451eb default }" containerID=c8f901fd90e5d579e8dd4b6c9840d03f40a2a3abbe30162dfd8f41497a719b3f datapathConfiguration="&{false false false false false }" interface=lxcb846b99bb13b k8sPodName=openstack/staffeln-db-sync-wsb98 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8f901fd90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3064 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-sync-wsb98 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8f901fd90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3064 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0b6c83fc-d596-468c-a8e5-10ae05715f37,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0b6c83fc-d596-468c-a8e5-10ae05715f37,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-sync-wsb98 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=0b6c83fc-d596-468c-a8e5-10ae05715f37;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=0b6c83fc-d596-468c-a8e5-10ae05715f37;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8f901fd90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3064 identity=39754 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0b6c83fc-d596-468c-a8e5-10ae05715f37,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0b6c83fc-d596-468c-a8e5-10ae05715f37,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-sync-wsb98 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8f901fd90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3064 identity=39754 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-sync-wsb98 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c8f901fd90 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3064 identity=39754 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-sync-wsb98 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8f901fd90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3064 identity=39754 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-sync-wsb98 subsys=daemon level=info msg="Delete endpoint request" containerID=c8f901fd90 endpointID=3064 k8sNamespace=openstack k8sPodName=staffeln-db-sync-wsb98 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=0b6c83fc-d596-468c-a8e5-10ae05715f37 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=0b6c83fc-d596-468c-a8e5-10ae05715f37 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=c8f901fd90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3064 identity=39754 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-sync-wsb98 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 ccb744cf-02f5-45d1-a42f-9ecd6c2d5818 default }" containerID=d6989b3e511260b1dd0fef0e3b6cfa2c8fc29b04c886031bead752cde3e359d3 datapathConfiguration="&{false false false false false }" interface=lxc1bad41e8b802 k8sPodName=local-path-storage/helper-pod-create-pvc-f90f94a1-8f92-4e98-8a5b-4edd0efac4b9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6989b3e51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f90f94a1-8f92-4e98-8a5b-4edd0efac4b9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6989b3e51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f90f94a1-8f92-4e98-8a5b-4edd0efac4b9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6989b3e51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=19001 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f90f94a1-8f92-4e98-8a5b-4edd0efac4b9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6989b3e51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=19001 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f90f94a1-8f92-4e98-8a5b-4edd0efac4b9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6989b3e51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=837 identity=19001 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f90f94a1-8f92-4e98-8a5b-4edd0efac4b9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6989b3e51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=837 identity=19001 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f90f94a1-8f92-4e98-8a5b-4edd0efac4b9 subsys=daemon level=info msg="Delete endpoint request" containerID=d6989b3e51 endpointID=837 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f90f94a1-8f92-4e98-8a5b-4edd0efac4b9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d6989b3e51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=837 identity=19001 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f90f94a1-8f92-4e98-8a5b-4edd0efac4b9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 eaf369d2-bf7c-4876-ba82-3e5c9c55cf4d default }" containerID=d1324836aebfc1a538198bb2d9ff60a26f455962085c7c2ce0a2c203628758e2 datapathConfiguration="&{false false false false false }" interface=lxc50a23809ca53 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1324836ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1609 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1324836ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1609 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1324836ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1609 identity=7052 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1324836ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1609 identity=7052 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1324836ae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1609 identity=7052 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1324836ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1609 identity=7052 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.215 ef3d014d-a581-46e5-bdd6-e7ac84f5b37b default }" containerID=5a2ca62d59e497cc81552b21731af50d856c36fe8dd40b3972a812679cf030d8 datapathConfiguration="&{false false false false false }" interface=lxcbddfb22ef092 k8sPodName=openstack/cinder-api-5694c8fb4f-n5nvt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a2ca62d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/cinder-api-5694c8fb4f-n5nvt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a2ca62d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/cinder-api-5694c8fb4f-n5nvt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a2ca62d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=19703 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/cinder-api-5694c8fb4f-n5nvt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a2ca62d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=19703 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/cinder-api-5694c8fb4f-n5nvt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 5f40f7ba-76a1-4f55-ae83-4f3e3f157b89 default }" containerID=bf1e468b7127a0588c06182378ea8fd26b471f7a0ba64cb69342d4e08db9fbf2 datapathConfiguration="&{false false false false false }" interface=lxcf97672468ea2 k8sPodName=openstack/cinder-scheduler-5d4bfcffcf-286tp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf1e468b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/cinder-scheduler-5d4bfcffcf-286tp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf1e468b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/cinder-scheduler-5d4bfcffcf-286tp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf1e468b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=5831 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/cinder-scheduler-5d4bfcffcf-286tp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf1e468b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=5831 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/cinder-scheduler-5d4bfcffcf-286tp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a2ca62d59 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2428 identity=19703 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/cinder-api-5694c8fb4f-n5nvt subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a2ca62d59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2428 identity=19703 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/cinder-api-5694c8fb4f-n5nvt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 fae9743a-a680-4cac-a4eb-fd69fe7c7ba7 default }" containerID=0ca6587dff37e8161128b7d0085d12ab2358398cd0c05232c827e7472c7fcfab datapathConfiguration="&{false false false false false }" interface=lxc93d2cf5620e1 k8sPodName=openstack/cinder-db-init-w8d4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ca6587dff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/cinder-db-init-w8d4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ca6587dff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=53d80ebe-556b-4b90-801b-7e99b9aa3042,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=53d80ebe-556b-4b90-801b-7e99b9aa3042,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/cinder-db-init-w8d4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=53d80ebe-556b-4b90-801b-7e99b9aa3042;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=53d80ebe-556b-4b90-801b-7e99b9aa3042;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ca6587dff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=6176 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=53d80ebe-556b-4b90-801b-7e99b9aa3042,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=53d80ebe-556b-4b90-801b-7e99b9aa3042,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/cinder-db-init-w8d4r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ca6587dff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=6176 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/cinder-db-init-w8d4r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf1e468b71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1915 identity=5831 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/cinder-scheduler-5d4bfcffcf-286tp subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf1e468b71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1915 identity=5831 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/cinder-scheduler-5d4bfcffcf-286tp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0ca6587dff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=381 identity=6176 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/cinder-db-init-w8d4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ca6587dff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=381 identity=6176 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/cinder-db-init-w8d4r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ca6587dff endpointID=381 k8sNamespace=openstack k8sPodName=cinder-db-init-w8d4r subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=53d80ebe-556b-4b90-801b-7e99b9aa3042 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=53d80ebe-556b-4b90-801b-7e99b9aa3042 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0ca6587dff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=381 identity=6176 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/cinder-db-init-w8d4r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 e795c2f8-2e77-4e64-befb-c01511becf0b default }" containerID=d5014d3d8343b50eeae4de102fc186b505c8fdf2c7941e61c4f00d395c7fda8e datapathConfiguration="&{false false false false false }" interface=lxc721982583e65 k8sPodName=openstack/cinder-db-sync-zlnl4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5014d3d83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/cinder-db-sync-zlnl4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5014d3d83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d2d28c3e-878a-4919-a5f2-8db5f87d91f9,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=d2d28c3e-878a-4919-a5f2-8db5f87d91f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/cinder-db-sync-zlnl4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d2d28c3e-878a-4919-a5f2-8db5f87d91f9;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=d2d28c3e-878a-4919-a5f2-8db5f87d91f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5014d3d83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identity=36466 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d2d28c3e-878a-4919-a5f2-8db5f87d91f9,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=d2d28c3e-878a-4919-a5f2-8db5f87d91f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/cinder-db-sync-zlnl4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5014d3d83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identity=36466 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/cinder-db-sync-zlnl4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d5014d3d83 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=949 identity=36466 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/cinder-db-sync-zlnl4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5014d3d83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=949 identity=36466 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/cinder-db-sync-zlnl4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d5014d3d83 endpointID=949 k8sNamespace=openstack k8sPodName=cinder-db-sync-zlnl4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d2d28c3e-878a-4919-a5f2-8db5f87d91f9 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=d2d28c3e-878a-4919-a5f2-8db5f87d91f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d5014d3d83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=949 identity=36466 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/cinder-db-sync-zlnl4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 4d8559ba-9a65-44a9-ac60-2ad9f3afb251 default }" containerID=1b0812e06808d820f989ff7c93cb69459ca79de61d3c2087c9a2ad10b7da4336 datapathConfiguration="&{false false false false false }" interface=lxcb112838867f5 k8sPodName=openstack/cinder-rabbit-init-8fqvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b0812e068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2686 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b0812e068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2686 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=448f24ea-8cf4-4f8f-b797-8a2e73ec9de4,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=448f24ea-8cf4-4f8f-b797-8a2e73ec9de4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=448f24ea-8cf4-4f8f-b797-8a2e73ec9de4;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=448f24ea-8cf4-4f8f-b797-8a2e73ec9de4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b0812e068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2686 identity=21649 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=448f24ea-8cf4-4f8f-b797-8a2e73ec9de4,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=448f24ea-8cf4-4f8f-b797-8a2e73ec9de4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b0812e068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2686 identity=21649 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqvw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1b0812e068 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2686 identity=21649 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b0812e068 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2686 identity=21649 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqvw subsys=daemon level=info msg="Delete endpoint request" containerID=1b0812e068 endpointID=2686 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-8fqvw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=448f24ea-8cf4-4f8f-b797-8a2e73ec9de4 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=448f24ea-8cf4-4f8f-b797-8a2e73ec9de4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=1b0812e068 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2686 identity=21649 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/cinder-rabbit-init-8fqvw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 2c5d3f1c-6548-4274-a637-a2f9b499015d default }" containerID=5ada19e998e108d651076682a2fdbfa567e9c068412a0210e300bf268ba2522c datapathConfiguration="&{false false false false false }" interface=lxcd5d637b2adc5 k8sPodName=openstack/cinder-ks-service-2bnwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ada19e998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/cinder-ks-service-2bnwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ada19e998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=79d9de36-c28f-42db-9359-34804e0d151d,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=79d9de36-c28f-42db-9359-34804e0d151d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/cinder-ks-service-2bnwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=79d9de36-c28f-42db-9359-34804e0d151d;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=79d9de36-c28f-42db-9359-34804e0d151d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ada19e998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identity=20291 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=79d9de36-c28f-42db-9359-34804e0d151d,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=79d9de36-c28f-42db-9359-34804e0d151d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/cinder-ks-service-2bnwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ada19e998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identity=20291 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/cinder-ks-service-2bnwh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ada19e998 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3659 identity=20291 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/cinder-ks-service-2bnwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ada19e998 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3659 identity=20291 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/cinder-ks-service-2bnwh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ada19e998 endpointID=3659 k8sNamespace=openstack k8sPodName=cinder-ks-service-2bnwh subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=79d9de36-c28f-42db-9359-34804e0d151d k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=79d9de36-c28f-42db-9359-34804e0d151d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=5ada19e998 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3659 identity=20291 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/cinder-ks-service-2bnwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 daff0d03-9f0d-4886-a46f-a71047b72b49 default }" containerID=b674b7e46f315db6cccd22a2e8ad2d737e2700be8d61e7400bd2a4718759c69b datapathConfiguration="&{false false false false false }" interface=lxc11dad8025115 k8sPodName=openstack/cinder-ks-endpoints-4v6lb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b674b7e46f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3610 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-ks-endpoints-4v6lb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b674b7e46f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3610 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=bf1b87d6-9cdf-4467-93b5-5c557b6201a2,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bf1b87d6-9cdf-4467-93b5-5c557b6201a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-ks-endpoints-4v6lb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=bf1b87d6-9cdf-4467-93b5-5c557b6201a2;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=bf1b87d6-9cdf-4467-93b5-5c557b6201a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b674b7e46f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3610 identity=53919 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=bf1b87d6-9cdf-4467-93b5-5c557b6201a2,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bf1b87d6-9cdf-4467-93b5-5c557b6201a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-ks-endpoints-4v6lb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b674b7e46f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3610 identity=53919 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-ks-endpoints-4v6lb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b674b7e46f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3610 identity=53919 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-ks-endpoints-4v6lb subsys=endpoint level=info msg="Successful endpoint creation" containerID=b674b7e46f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3610 identity=53919 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-ks-endpoints-4v6lb subsys=daemon level=info msg="Delete endpoint request" containerID=b674b7e46f endpointID=3610 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-4v6lb subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=bf1b87d6-9cdf-4467-93b5-5c557b6201a2 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=bf1b87d6-9cdf-4467-93b5-5c557b6201a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=b674b7e46f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3610 identity=53919 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-ks-endpoints-4v6lb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 f344e304-ee9c-4965-8e34-b0e0c414f6c1 default }" containerID=8ecee4f22a42b10d10f1fceb75a0477fb83d936b94c204545c338b5f846a82b2 datapathConfiguration="&{false false false false false }" interface=lxcb67dc383509a k8sPodName=openstack/cinder-ks-user-w7swk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ecee4f22a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-ks-user-w7swk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ecee4f22a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=07f18d03-35e2-4c26-a3cf-06031e798f2b,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=07f18d03-35e2-4c26-a3cf-06031e798f2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-ks-user-w7swk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8ecee4f22a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-ks-user-w7swk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=07f18d03-35e2-4c26-a3cf-06031e798f2b;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=07f18d03-35e2-4c26-a3cf-06031e798f2b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ecee4f22a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 identity=53319 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=07f18d03-35e2-4c26-a3cf-06031e798f2b,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=07f18d03-35e2-4c26-a3cf-06031e798f2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-ks-user-w7swk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ecee4f22a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 identity=53319 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-ks-user-w7swk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ecee4f22a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=749 identity=53319 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-ks-user-w7swk subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ecee4f22a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=749 identity=53319 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-ks-user-w7swk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ecee4f22a endpointID=749 k8sNamespace=openstack k8sPodName=cinder-ks-user-w7swk subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=07f18d03-35e2-4c26-a3cf-06031e798f2b k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=07f18d03-35e2-4c26-a3cf-06031e798f2b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8ecee4f22a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=749 identity=53319 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-ks-user-w7swk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 22708d1d-34f4-43db-be0d-1aeef6455ca9 default }" containerID=11690513c17436049fec68865c5083c787a69887330a1a9be777345d79c472ea datapathConfiguration="&{false false false false false }" interface=lxc4c8f7d8c8513 k8sPodName=openstack/cinder-backup-storage-init-txnvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11690513c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/cinder-backup-storage-init-txnvm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11690513c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a9b3412f-8f6c-4871-a15f-0d96e84e4bbb,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=a9b3412f-8f6c-4871-a15f-0d96e84e4bbb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/cinder-backup-storage-init-txnvm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a9b3412f-8f6c-4871-a15f-0d96e84e4bbb;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=a9b3412f-8f6c-4871-a15f-0d96e84e4bbb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=11690513c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.172 ipv6= k8sPodName=openstack/cinder-backup-storage-init-txnvm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=11690513c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=43479 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a9b3412f-8f6c-4871-a15f-0d96e84e4bbb,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=a9b3412f-8f6c-4871-a15f-0d96e84e4bbb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/cinder-backup-storage-init-txnvm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11690513c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=43479 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/cinder-backup-storage-init-txnvm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11690513c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1868 identity=43479 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/cinder-backup-storage-init-txnvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=11690513c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1868 identity=43479 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/cinder-backup-storage-init-txnvm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=11690513c1 endpointID=1868 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-txnvm subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a9b3412f-8f6c-4871-a15f-0d96e84e4bbb k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=a9b3412f-8f6c-4871-a15f-0d96e84e4bbb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=11690513c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1868 identity=43479 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/cinder-backup-storage-init-txnvm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 6c71efc5-647e-4c32-a958-72d728cf934c default }" containerID=e1ffb1176c7893da9f76e1a9b5759c173b5339e8b11dcfbe452b7c082c174a11 datapathConfiguration="&{false false false false false }" interface=lxcb7f95ca9bd17 k8sPodName=openstack/cinder-create-internal-tenant-7nxvf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1ffb1176c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-7nxvf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1ffb1176c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=67a160b9-8aa9-4830-88bd-6094c09e188b,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=67a160b9-8aa9-4830-88bd-6094c09e188b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-7nxvf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=67a160b9-8aa9-4830-88bd-6094c09e188b;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=67a160b9-8aa9-4830-88bd-6094c09e188b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1ffb1176c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=53842 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=67a160b9-8aa9-4830-88bd-6094c09e188b,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=67a160b9-8aa9-4830-88bd-6094c09e188b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-7nxvf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1ffb1176c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=53842 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-7nxvf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e1ffb1176c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=264 identity=53842 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-7nxvf subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1ffb1176c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=264 identity=53842 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-7nxvf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e1ffb1176c endpointID=264 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-7nxvf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=67a160b9-8aa9-4830-88bd-6094c09e188b k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=67a160b9-8aa9-4830-88bd-6094c09e188b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e1ffb1176c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=264 identity=53842 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-7nxvf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 c9e96f2b-bb34-42b5-98c7-09f6f26e1194 default }" containerID=5d2e86cab1eee9dd49d0b812b01bfd40ea7536092887e143419d83d2b5701702 datapathConfiguration="&{false false false false false }" interface=lxc986db2cad591 k8sPodName=openstack/cinder-storage-init-z4zf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d2e86cab1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/cinder-storage-init-z4zf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d2e86cab1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=41ac7991-6a5f-4c2a-8fac-799b75be23d0,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=41ac7991-6a5f-4c2a-8fac-799b75be23d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/cinder-storage-init-z4zf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=41ac7991-6a5f-4c2a-8fac-799b75be23d0;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=41ac7991-6a5f-4c2a-8fac-799b75be23d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d2e86cab1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identity=28445 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=41ac7991-6a5f-4c2a-8fac-799b75be23d0,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=41ac7991-6a5f-4c2a-8fac-799b75be23d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/cinder-storage-init-z4zf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d2e86cab1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identity=28445 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/cinder-storage-init-z4zf7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d2e86cab1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3253 identity=28445 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/cinder-storage-init-z4zf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d2e86cab1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3253 identity=28445 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/cinder-storage-init-z4zf7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5d2e86cab1 endpointID=3253 k8sNamespace=openstack k8sPodName=cinder-storage-init-z4zf7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=41ac7991-6a5f-4c2a-8fac-799b75be23d0 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=41ac7991-6a5f-4c2a-8fac-799b75be23d0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=5d2e86cab1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3253 identity=28445 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/cinder-storage-init-z4zf7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 3c339542-de29-49ce-ba74-46778fb82d0c default }" containerID=7b25ec208576bb8a88a2db3181b9748c5dbf366bfabe34191ddebde4e15d9b10 datapathConfiguration="&{false false false false false }" interface=lxc97e0c70bddc4 k8sPodName=openstack/cinder-bootstrap-h5tzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b25ec2085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-bootstrap-h5tzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b25ec2085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=74865246-ec3b-49e4-bc00-8c4d1433e08d,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=74865246-ec3b-49e4-bc00-8c4d1433e08d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-bootstrap-h5tzm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=74865246-ec3b-49e4-bc00-8c4d1433e08d;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=74865246-ec3b-49e4-bc00-8c4d1433e08d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b25ec2085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identity=32277 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=74865246-ec3b-49e4-bc00-8c4d1433e08d,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=74865246-ec3b-49e4-bc00-8c4d1433e08d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-bootstrap-h5tzm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b25ec2085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identity=32277 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-bootstrap-h5tzm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7b25ec2085 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=710 identity=32277 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-bootstrap-h5tzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b25ec2085 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=710 identity=32277 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-bootstrap-h5tzm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.48 9baddce4-fb53-43ce-9f5f-f2455ddba573 default }" containerID=f88d0a19ac2d4bb9e96286faa276178bd52a93cc4f83dce6de638c0c5b7c8484 datapathConfiguration="&{false false false false false }" interface=lxc9feb28c999d5 k8sPodName=openstack/cinder-backup-5467f7bdb5-lts6j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f88d0a19ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3448 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-backup-5467f7bdb5-lts6j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f88d0a19ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3448 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-backup-5467f7bdb5-lts6j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f88d0a19ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3448 identity=34145 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-backup-5467f7bdb5-lts6j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f88d0a19ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3448 identity=34145 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-backup-5467f7bdb5-lts6j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 45afa3cc-001c-46b5-b9fb-66f50032aea5 default }" containerID=709f05c6f8cb827d8642256f91417412b2cc9161fd1c27f6c8a18e012cea96e2 datapathConfiguration="&{false false false false false }" interface=lxc6502e31396a1 k8sPodName=openstack/cinder-volume-756f489f7-qrx64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=709f05c6f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-volume-756f489f7-qrx64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=709f05c6f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-volume-756f489f7-qrx64 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=709f05c6f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=6316 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-volume-756f489f7-qrx64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=709f05c6f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=6316 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-volume-756f489f7-qrx64 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f88d0a19ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3448 identity=34145 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-backup-5467f7bdb5-lts6j subsys=endpoint level=info msg="Successful endpoint creation" containerID=f88d0a19ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3448 identity=34145 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/cinder-backup-5467f7bdb5-lts6j subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=709f05c6f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=81 identity=6316 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-volume-756f489f7-qrx64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=709f05c6f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=81 identity=6316 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-volume-756f489f7-qrx64 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.96 d70ea4ec-d3e6-4eb1-9379-d5fe73be6638 default }" containerID=da357b33fd4abb611c68ce9091e54c64b99a3e284e839319530720e52739a2a5 datapathConfiguration="&{false false false false false }" interface=lxc7853e2924638 k8sPodName=openstack/cinder-volume-usage-audit-29715065-n58zr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da357b33fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29715065-n58zr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da357b33fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=6a72d3b5-c211-4f34-a007-7e44a9046ca1,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29715065,k8s:component=volume-usage-audit,k8s:controller-uid=6a72d3b5-c211-4f34-a007-7e44a9046ca1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29715065,k8s:release_group=cinder" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29715065-n58zr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=6a72d3b5-c211-4f34-a007-7e44a9046ca1;k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29715065;k8s:component=volume-usage-audit;k8s:controller-uid=6a72d3b5-c211-4f34-a007-7e44a9046ca1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-volume-usage-audit-29715065;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da357b33fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 identity=21372 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=6a72d3b5-c211-4f34-a007-7e44a9046ca1,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29715065,k8s:component=volume-usage-audit,k8s:controller-uid=6a72d3b5-c211-4f34-a007-7e44a9046ca1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29715065,k8s:release_group=cinder" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29715065-n58zr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da357b33fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 identity=21372 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29715065-n58zr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=da357b33fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2050 identity=21372 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29715065-n58zr subsys=endpoint level=info msg="Successful endpoint creation" containerID=da357b33fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2050 identity=21372 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29715065-n58zr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager